last executing test programs: 6m28.321034252s ago: executing program 3 (id=114): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 6m26.444346732s ago: executing program 3 (id=116): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000001af00)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000033f00)=@req={0x3fc, 0xfeff, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f0000033f80), 0x4000000000000e4, 0x0) 6m19.891864903s ago: executing program 3 (id=131): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x20, 0x17, 0x2, "549b"}, 0x0, 0x0, 0x0, 0x0}) 6m16.395725333s ago: executing program 3 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000240)=""/102392, 0x18ff8) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f0000019300)="e1118ce4809b28ab595a99a4a14d", 0xe, 0x800, &(0x7f0000019340)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 6m12.879064065s ago: executing program 3 (id=139): openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) setfsgid(0xee00) getpriority(0x2, r0) 6m3.446949495s ago: executing program 3 (id=157): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x18, 0x68, 0x501}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x1c, &(0x7f0000000a80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m46.621005488s ago: executing program 32 (id=157): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x18, 0x68, 0x501}, 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x1c, &(0x7f0000000a80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m48.723423554s ago: executing program 4 (id=545): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000540)=""/161) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x20, 0x7, 0x64, {0x64, 0x24, "2b53cd95691d4503615651e7f35b6f59717762622e3439bef145139ac516af3d69a19537322c1666f7e250df3de731ef1d4364f1ead7d473f245e220f7ceb7d1275fd84e7b200615abcd0e76a2527e931ead986fdb4d78856596f2970a61bdf3fc26"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}, &(0x7f0000000740)={0x0, 0xf, 0x87, {0x5, 0xf, 0x87, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "25b6978ef7c3e33e7128f6be3171098a"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0xfff, 0x0, 0x8, [0x3f30, 0x30, 0xf, 0x600f, 0xc03f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0x0, 0x400}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x4, 0xf000, 0x3, [0xc00f, 0xffc000, 0x0, 0xff, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf00, 0x81, [0xc0, 0xc0, 0xff0000, 0x3f00, 0xc0c0]}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x6, 0x4, "bbc10cef", "bc0d6435"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0xdf, 0x4, 0x8, 0x4, 0x36b4}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0) 2m45.300350099s ago: executing program 4 (id=555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00330600000000fddbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000000040004e24800100008000"/66, @ANYBLOB="d434c2212e3e114e3930b2d172e57893cbbc0affb0c53b395fb81fc3f0bb9490b898ee6263862a83f6e2a1918cab208f6f438862082cb1e537efb604c52002db5e6427a666f57d99981838035a949923b7d858e46e4342e815696ea266f10d82506bd31ea0383fa2d5", @ANYRES16, @ANYBLOB="fe8000000000000000000000000000bb000000003200000000000000000000000000000000000001230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000000800280000000000"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00330600000000fddbdf25fe8000000000000000000000000000aaffffffff000000000000000000000000000040004e24800100008000"/66, @ANYBLOB="d434c2212e3e114e3930b2d172e57893cbbc0affb0c53b395fb81fc3f0bb9490b898ee6263862a83f6e2a1918cab208f6f438862082cb1e537efb604c52002db5e6427a666f57d99981838035a949923b7d858e46e4342e815696ea266f10d82506bd31ea0383fa2d5", @ANYRES16, @ANYBLOB="fe8000000000000000000000000000bb000000003200000000000000000000000000000000000001230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000000800280000000000"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) 2m45.022392383s ago: executing program 4 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfeffff7f, 0xe61e}}]}]}]}, 0x48}}, 0x44000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x2) getdents64(r1, &(0x7f0000000140)=""/46, 0x2e) getdents64(r1, 0xfffffffffffffffe, 0x29) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.607124609s ago: executing program 4 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1101491, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x8, 0xc9, "d2df1b31a1716f07"}}}}, 0xf) 2m43.404187649s ago: executing program 4 (id=567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000e80)='X', 0x1}, {&(0x7f0000000140)="31c4e0844d5524c9416b9006c7c5a8eda2f25f88633a243f2c92956361f23e87beb1650dcac28cf27cdbbc3b9963b8c119a725c751413ff0fd89c21c8ab43257483577e9a28604d76bf935a7fce19cc0a749589572781262", 0x58}], 0x2) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m41.896334912s ago: executing program 4 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/259, 0x103}, {&(0x7f0000007800)=""/4123, 0x101b}, {&(0x7f0000000500)=""/4094, 0xffe}, {0x0}, {&(0x7f0000002800)=""/119, 0x77}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000002900)=""/4100, 0x1004}, {&(0x7f0000000340)=""/258, 0x102}, {&(0x7f0000003a40)=""/142, 0x8e}], 0x9}, 0x10082) 2m41.000796118s ago: executing program 33 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/259, 0x103}, {&(0x7f0000007800)=""/4123, 0x101b}, {&(0x7f0000000500)=""/4094, 0xffe}, {0x0}, {&(0x7f0000002800)=""/119, 0x77}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000002900)=""/4100, 0x1004}, {&(0x7f0000000340)=""/258, 0x102}, {&(0x7f0000003a40)=""/142, 0x8e}], 0x9}, 0x10082) 2m26.396260192s ago: executing program 5 (id=622): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='xfs\x00', 0x200081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x802, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, @pix={0x3, 0x401, 0x34324241, 0x0, 0x3, 0x3, 0xc, 0x3, 0x0, 0x4, 0x0, 0x3}}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x68, 0x10, 0x401, 0x400002, 0x3, {0x0, 0x0, 0x0, 0x0, 0x10, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = eventfd(0x8c66) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x40008000, &(0x7f0000000540)="e3c4bd56634308b6b12fd79427211b5457e308585b18e38d6c9f8f869758c1e9f3d2835735e331b0f7358b1bb690ca3fd21a236d1ca5be62afb1c7f7", 0x3c, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="71aa0a27e508faa28041f2c4552804f4c27fe12af503678ce3f9467fbfcc0c43aad7ffd09c23d0159d5c8420735775099130c077980a617f4c7d4c2923edb0232f2a0018453bec41473b8eb754d8fbb68b2d51ca90688ff98a4a8a9c7c54") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)) r7 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000740)={'\x00', 0x7f, 0xe, 0x50, 0x8, 0xfffffffffffffffc, r7}) r9 = syz_open_procfs$userns(r8, &(0x7f0000000700)) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1407, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x8001) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xb6f3, 0x0, 0x1, r5}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x0, "53c004"}, 0x6) 2m16.291069202s ago: executing program 5 (id=645): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 2m13.665942824s ago: executing program 5 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='casefold,strict_encoding\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x141000, 0x83) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x40000000) mkdirat(r0, &(0x7f0000000000)='./file7\x00', 0x1a8) (fail_nth: 1) 2m13.133792769s ago: executing program 5 (id=652): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890c, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') (fail_nth: 1) 2m12.259697727s ago: executing program 5 (id=653): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890c, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x1684, &(0x7f0000002440)={0x0, 0x3a2b, 0x2, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002500)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x70bd29, 0x25dfdbff, {0x7}, [{0x4}, {0x30, 0x1, [@m_bpf={0x2c, 0x1008, 0x0, 0x0, {{0x8, 0x1d}, {0x4, 0x1d}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x198) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$inet(0x2, 0x2, 0x11) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002380)='./proc\x00', &(0x7f00000023c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r8, &(0x7f0000002440), 0x1) read(r8, &(0x7f0000002480), 0x120) close_range(r5, 0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 2m11.528940013s ago: executing program 5 (id=655): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ppoll(&(0x7f0000000600)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m59.231542163s ago: executing program 2 (id=677): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000001ac0)={&(0x7f0000001b00)={0xa, 0x1234, 0x0, @loopback}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001b80)='\x00', 0x1}], 0x1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}, 0x20040810) (fail_nth: 1) 1m57.575903761s ago: executing program 2 (id=681): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000002100010026bd7000fddbdf25027b10f4fd0000081e00000008000100e000000108000200ac1414bb858aa94cc727263c614686811bca46db46a95b4c39233b62bff35e71adaa6f35bcf5a5b21b09ee4743db52c52901400b5db13d2dc1d7a3491769e3a93f376655e87780a814929c8107029159cc0e1a55522dfc37ab33ee01dc0f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@local, @random="00ff00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0ff5a212bd35e12fc32b95e9b6833fd5173150e125a55c71f520843f569b5da8", "4ad0eccf913b5e6bd1b47b6d9ef560206c001dd299e10e3a89c8226029312bcba06d7e453e4978d6536b601da90ec757", "f98f7e18ac4778bdf4ff85c4e5605d1689eb03e8f1250809c36cae1b", {"cf99c5c46a30928cfad069c141a84314", "b8be54b6325f35c30e31e6f2c0f78b6b"}}}}}}}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000440)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000480)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0xa, 0x40010, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in6}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000004000000040000000000000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000007ff0200"/28], 0x50) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x1, @pix_mp={0x20081, 0x0, 0x34424752, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0xffffffff}, {0x7}, {0x6, 0x100002}], 0xf2, 0x8, 0x1}}) 1m57.264824s ago: executing program 2 (id=684): openat(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1ff, 0xa001) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x804000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1) 1m57.098545834s ago: executing program 2 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/ip_vs_app\x00', 0x0, 0x0) read(r0, &(0x7f0000019740)=""/1024, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000005000100070000000900020073797a3100000000050005000a000000050004000000000013000300686173683a6e65a6ec7ef6061319b400"], 0x4c}}, 0x80e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000906010200000000000000000200ffff300007801800018014000240fe8000000000000000000000000000aa00021700766c616e3020000000000000000000000900020073797a31000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sendmsg$can_bcm(r0, &(0x7f0000019c80)={&(0x7f0000019b80), 0x10, &(0x7f0000019c40)={&(0x7f0000019bc0)={0x6, 0x400, 0xbdb, {0x0, 0x2710}, {0x77359400}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x1e, 0x0, 0x0, 0x0, "43908855370c1592e1177eb7cac773ad50330c5c7a8517c4da51546a8507284b421a36b7b7d7908bbd9c07a46f05b6979a1066016ece5387ff60598f4837bd2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400002, r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000000640)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./tracing\x00', 0x1ff) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x29, 0x4, @thr={&(0x7f00000004c0)="eac3f45722337a5f614e843ded0a5b703d415a98a0a43e044533a82a7782b7f0d748bd3acc", &(0x7f0000000500)="f13839a0e4adcdaad4b8e610bc22766d2ad8e7da26feed86856da80fd573442302b950e5b0a7dcc0c890c9221cf7a9ae338f3a6a529b84b2970a6ca4a36bbfd0cd5aec8e08a414a0995ea6b12557d0059ff9dce683b575b2424972b73276a8d8fa215f5b276621267ca1da7b38dea344ad7baa844dfd5a6298a8ac45f8b1a90e53dbc3"}}, &(0x7f0000019b40)) mount(0x0, &(0x7f0000019680)='./tracing\x00', &(0x7f00000196c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019700)='./tracing/events/sched/filter\x00', 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m55.10671506s ago: executing program 34 (id=655): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ppoll(&(0x7f0000000600)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m55.064208125s ago: executing program 2 (id=689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m48.11762965s ago: executing program 2 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3c2aab0, 0x1, 0x1}) (fail_nth: 1) 1m32.539705026s ago: executing program 35 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='100', 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3c2aab0, 0x1, 0x1}) (fail_nth: 1) 12.780048907s ago: executing program 7 (id=1022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000e80)='X', 0x1}, {&(0x7f0000000140)="31c4e0844d5524c9416b9006c7c5a8eda2f25f88633a243f2c92956361f23e87beb1650dcac28cf27cdbbc3b9963b8c119a725c751413ff0fd89c21c8ab43257483577e9a28604d76bf935a7fce19cc0a749589572781262", 0x58}, {&(0x7f0000000480)="843d7692e049ebc24eb1ec6d57f5bfd70677003eea8aa14159992f4f21813c9cff934bed64374dd76186d5c3219bf3767a5c61452be9037ce4f23b35b7588113e5f4a5e3524c42", 0x47}], 0x3) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) 11.835952964s ago: executing program 7 (id=1026): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x7f, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x6, 0x6, {0x9, 0x21, 0x80, 0x10, 0x1, {0x22, 0x3aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x88, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "5ddc"}}, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f000000000000000012000000', 0x4b) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000280)={0x0, 0x6, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x30b, 0x70bd2d, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 11.281504385s ago: executing program 6 (id=1030): r0 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000440)=0x1) 10.716617866s ago: executing program 1 (id=1031): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000040)="0f0766b8003800000f23d80f21f86635c00000400f23f8650f18914646baf80c66b8ec2abd8b66effd66ed0f829edc65c8be015a01fe03c4c4277ed6d69e00302a0f20d86635087100000f22d8", 0x4d}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.297865985s ago: executing program 8 (id=1033): r0 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000440)=0x1) (fail_nth: 1) 9.872264882s ago: executing program 1 (id=1035): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000004d80)='clear_refs\x00') writev(r0, &(0x7f0000004dc0)=[{&(0x7f0000004e00)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000002700)=[{&(0x7f0000002780)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x74, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)={0x64, 0x42, 0x1, 0x70bd25, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x42, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000002b0000001d2bffc1"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./mnt_f2fs\x00', 0x1ed) mount(&(0x7f0000002840)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002880)='./mnt_f2fs\x00', &(0x7f00000028c0)='f2fs\x00', 0x0, &(0x7f0000002900)='compress_algorithm=lst\x85F6\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000200)={r5, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5, 0x800000]}}) r7 = dup(r6) read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x67ec255e) syz_ublk_setup_io_uring(0x1d, &(0x7f0000002640)={0x0, 0x10750b, 0x0, 0x4, 0x156, 0x0, r0}, &(0x7f00000026c0), &(0x7f0000000400), &(0x7f0000002740)) 9.473035754s ago: executing program 8 (id=1036): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000e80)='X', 0x1}, {&(0x7f0000000140)="31c4e0844d5524c9416b9006c7c5a8eda2f25f88633a243f2c92956361f23e87beb1650dcac28cf27cdbbc3b9963b8c119a725c751413ff0fd89c21c8ab43257483577e9a28604d76bf935a7fce19cc0a749589572781262", 0x58}, {&(0x7f0000000480)="843d7692e049ebc24eb1ec6d57f5bfd70677003eea8aa14159992f4f21813c9cff934bed64374dd76186d5c3219bf3767a5c61452be9037ce4f23b35b7588113e5f4a5e3524c421ff34c7e9efbd4a803c310acf4d27807970a412a14e1ef9e7ae682a86918a9b0ef1b10", 0x6a}], 0x3) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) 9.398752541s ago: executing program 6 (id=1037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000e80)='X', 0x1}, {&(0x7f0000000140)="31c4e0844d5524c9416b9006c7c5a8eda2f25f88633a243f2c92956361f23e87beb1650dcac28cf27cdbbc3b9963b8c119a725c751413ff0fd89c21c8ab43257483577e9a28604d76bf935a7fce19cc0a749589572781262", 0x58}, {&(0x7f0000000480)="843d7692e049ebc24eb1ec6d57f5bfd70677003eea8aa14159992f4f21813c9cff934bed64374dd76186d5c3219bf3767a5c61452be9037ce4f23b35b7588113e5f4a5e3524c421ff34c7e9efbd4a803c310acf4d27807970a412a14e1ef9e7ae682a86918a9b0ef1b100a63d27e98b6f7f0fd80c2a4f0a7789a55a91b30782c7ab5cc00b9335fd37ed202", 0x8b}], 0x3) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) 9.394579488s ago: executing program 7 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) shutdown(r0, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (fail_nth: 1) 9.008149982s ago: executing program 7 (id=1039): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000780)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000380)={0x4, 0xffffffffffffffff, 0x6, {0x4, 0x8}, 0x5}, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0xcc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x4, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000540)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_create_resource$futex(&(0x7f0000000580)=0x1) syz_create_resource$futex(&(0x7f00000005c0)=0x3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) timer_delete(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0xbd62464ab6829f69, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1028, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x20, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x11, 0x6}, [@extension_unit={0x8, 0x24, 0x9, 0x6, 0x4, 0x3a, "9c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x8001, 0xfb}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x7f, "c99bf9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd, 0x2, 0x5, 0x1, "7964ee20c5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x8a, 0x3, {0x8, 0x25, 0x1, 0x0, 0x60, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x6, 0x9, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x6, 0xf24}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xb, 0x4, 0x0, 0x0, 0x10}, 0x18, &(0x7f0000000100)={0x5, 0xf, 0x18, 0x2, [@generic={0x8, 0x10, 0x4, "df363f35d2"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x48, 0x3, 0x3, 0x81, 0x2}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40c}}]}) 8.423813553s ago: executing program 1 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x8a) write(r0, &(0x7f00000003c0)='27', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0) 7.323220885s ago: executing program 0 (id=1042): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppoe(0x18, 0x1, 0x0) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0x8, 0xfff}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 7.124719008s ago: executing program 1 (id=1043): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x470bd2a, 0x3504, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x6, 0x5, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x7, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 6.554851984s ago: executing program 1 (id=1044): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c609040000000101"], 0x0) syz_open_dev$usbfs(&(0x7f0000000700), 0x76, 0x101b01) pselect6(0x40, &(0x7f0000000740), 0x0, &(0x7f0000000780)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000007c0)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x10001, 0x5}) r1 = msgget$private(0x0, 0x500) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) msgrcv(r1, &(0x7f0000000340)={0x0, ""/176}, 0xb8, 0x2, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000400)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f0000000440), 0x10) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) accept(r7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) 6.028609864s ago: executing program 0 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000013000500000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00ae21fd41308489", @ANYRES32=0x0, @ANYBLOB="0500210000000000"], 0x44}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000080)=0xb, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000002c0)=0x1, 0x4) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x13}, 0x800) 5.964195233s ago: executing program 7 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00210027bd7000000000001400000005002a000000000004000f"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='dummy0\x00', r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800259a", @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800000000000000000000000000000000000500140005000000"], 0x38}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0xfffffedf, 0x10, &(0x7f0000002080), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_eee={0x45, 0x4, 0x0, 0x80000003, 0x8, 0x1, 0x2, 0x200, [0xb8, 0x30]}}) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f00000001c0)="c92e0ae9a3bf62ca60a5", 0xa) r9 = socket$kcm(0xa, 0x5, 0x73) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x18, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) 5.917979925s ago: executing program 8 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom(r2, &(0x7f00000004c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 5.916632564s ago: executing program 6 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom(r2, &(0x7f00000004c0)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) (fail_nth: 1) r3 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 5.040249114s ago: executing program 0 (id=1049): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r2 = getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x3, &(0x7f0000000140)=0xffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x40b, 0x21464f, 0x67918}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r3, 0x0, 0xffff, 0x2, &(0x7f0000000240)='z0', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b3f04007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000180)={&(0x7f00000003c0)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000002900000004000000840230040030000004"], 0x30}, 0x800) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9cea000002030198010048007d5fc360ef08000100030000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000810}, 0x0) 4.106350436s ago: executing program 0 (id=1050): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000003c0)=0x8, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='syz_tun\x00', 0x10) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000015c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ppoll(&(0x7f00000016c0)=[{r0, 0x4003}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="4000000028120700080004008100000008001b00"], 0x30}}, 0x4004080) 4.054342555s ago: executing program 6 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f000000e1c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) (fail_nth: 1) 4.027382175s ago: executing program 8 (id=1052): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) socket$inet6(0xa, 0x80002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x15, 0x1, 0x0, 0x0, @str='\x06\x00\xbbf\xbb\xbf\x17WM!32+7\xb3\xab\xc3'}]}, 0x2c}}, 0x0) syz_create_resource$futex(&(0x7f00000001c0)=0x1) syz_create_resource$futex(&(0x7f0000000240)) write(r0, &(0x7f0000000200)="89", 0xffe3) 2.704957937s ago: executing program 8 (id=1053): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="dc50052c42ae98409b683a3d4bcba798157dbc62953daa16e3f27822c53621073646b7744244c3d392d77f", 0x2b, 0x8000, &(0x7f0000000180)={0x11, 0x11, r1, 0x1, 0x80, 0x6, @remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000980)=ANY=[@ANYBLOB="1b"]) (async) pwrite64(r2, &(0x7f0000000680)="02", 0x1, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000091041f000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2e5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write$make_it_fail(r5, &(0x7f0000000080)='1\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$media(&(0x7f0000000740), 0x3, 0x0) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) (async) pwritev2(r6, &(0x7f0000000800)=[{&(0x7f0000000840), 0x1}], 0x1000000000000081, 0x4, 0xa, 0x15) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b5000185f000000000000000000aaaa0000126700000000000000000000000011223344112233442c184c3769dae3fc69ffb13379487429d355d8c7a0e5d0066cc3f461d1b8ab7848b5cd80b0705b7b7b5a013280e8e24f60bd3c651015bd3c45b977ea5e9a3394504e4f4804262c00ede0c7e93f7efa"], 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000840)={0x0, 0x686}, &(0x7f0000000880)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000f00e9970000009800000005000000000000000000000300000000030000000400000000000000000000000200000d00000000030000000b0000000a000000010000000000000000000003000000000500000001000000000001000000000000000006040000000f0000000000000b040000000800000000000003000000000100000003000000000000000a00000000000009030000000900000000000001080000006100020d004f302e00"], &(0x7f0000000300)=""/193, 0xb5, 0xc1, 0x1, 0x7}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1a, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4db, 0x0, 0x0, 0x41100, 0xc, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x1, 0x3, 0xd, 0x7}], 0x10, 0x4}, 0x94) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x0, 0x45, 0xad, &(0x7f00000009c0)="b7864da5325a90b3192f4456aaf8d2a91a83cb306c5c657c841d7877dde7a63c797a90611c602460b823388d592a18bd47099457133b6695b080f63fa4954ca6fe4b704640", &(0x7f0000000a40)=""/173, 0x7, 0x0, 0x2c, 0x21, &(0x7f0000000b00)="55acf5080e499a92a418d4bf99e450c25749941538b0f21f1386ccddfac81857df8ea58b8a32d5c5b534c617", &(0x7f0000000b40)="af7303fca816fa15591831827186d5fac5806803c9bbf0ec1be5c4e43119faa618", 0x4, 0x0, 0xced4}, 0x50) 2.432417003s ago: executing program 6 (id=1054): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x3cd0, 0x0, 0x78, 'raid\x00', {'raid5_ra', 0x20, '3 64 daemon_sleep 100', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) (fail_nth: 1) 2.339841151s ago: executing program 7 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='0 200000', 0x8) write(r0, &(0x7f00000008c0)='0 2000000000 0\n', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='3', 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x0) syz_usb_connect$uac1(0x5, 0xae, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0xff, 0x20, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x36}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x6, 0x1, 0xd}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x4, 0x1, 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x401, 0x5, 0x2, 0xfff, 0x1, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x404, 0x4, 0x3, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x4, 0x6, {0x7, 0x25, 0x1, 0x8, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc1, 0x0, 0xe6, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x81, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2, 0x7fff}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x7, 0x3, 0x5, 0x8, 0x8}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f0514ec6400"], 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./proc/net/rpc/auth.unix.gid/channel\x00', &(0x7f0000000140), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64e53d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESDEC=r2]) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) futex_waitv(&(0x7f0000000600)=[{0x1, 0x0, 0x6}, {0x1, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$I2C(&(0x7f0000000500), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000540)={&(0x7f0000000580)=[{0xffff, 0x1200, 0x0, 0x0}, {0x7, 0x0, 0x0, 0x0}, {0x6, 0x400, 0x0, 0x0}], 0x3}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000010401090000000000000000010004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close_range(r3, r3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f7, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2.245776493s ago: executing program 0 (id=1056): r0 = syz_open_pts(0xffffffffffffffff, 0x100) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x1, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x4, 0x6, 0x2, r2}, &(0x7f0000000100)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x7}, 0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000002c0)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)="24cf5f8e493d34839067c77a5956699cb4eb11212d7ec58fdf7867ab579fa6080f7596747169a8dc839e2bef89c21a50312f1ff85451beb004fdb466174b25dcb5a8742c9ace8a809d53bae6d4f2bd038a10e63b92f643706288edfbdeb8e6ffddb619c06a92d66ab0410c0cf7e5e7540b9cc2127fad2f98b14c66929ec23eaaab0034b0f888b06477ae1f5499b94ce3a504491d2f9d180185b41e29597005124bb6e9d5d5214e69b1eb5170eef0d76b69f5679b243faa46f0e3482ea3a7f277705fc99be8b6f3d250897ed89f8cd955436e399f5542366f9c32464c917b9a8ea15ab85fad0ab154492e5841b90058b0d1a1be0bdc63632e935a2c0968", 0xfd}, {&(0x7f0000000440)="db19f01880c03a4ade17fee9fc7163136ca39eb0f71500193665af350a2456726fdc6732ae1b5c7a142be3e30553e375f20a2f7d2422e62e3daa0edf1d4f013dd09d6668ed08bcc15b066b0c8cfddafcb6c1927dd627c6cbeb03d94ecb47c8ae907bc1bb985800580e9d21d4ce5c2e886fc285cce8d8d3e388036c304e4941a81ce2089398d9f23963fe95ac4f2345df7fbf53fe19f2264b3423cb245975e3dbdb490a2409b47ef0339b8a420d4d714f47be42423fc5335dad5666c62ab2c113a868968418100761e61e2981108de19d16ec5cfc5b80c549c5a405927fceab", 0xdf}, {&(0x7f0000000540)="694c6061039fdc1a31d22c0e161d212ac5a670547360e0501de7c2307aac1fc24c8d839eee3406bcd003906575470644c2de6d031ddb1cd25d4513042d91c138aa43c15a8f3f3cbd18c49bef8f89cb88b86bb7a1ba3f23e8beb7031b130d1c2dd258e12a98b7d3605136185b3627a2a1a40055083f2a822bc84937c9fafecb154fdcba0aaa5732b27d32a5", 0x8b}, {&(0x7f0000000600)="99a19cef395de8e0d07649797375653dfd0637f73690b45781b4f2f5f3699a72d83cdb5ce4578af7361865adf874fffa88f3eceecda373c49eee09a01716786debc1849d1a4c25e178219768faf34c4f06607eadd5162fe49eba625dab1207ccb06b7b163147a8b9ad4db0c7444f388d9d4a9d54840ce43cf8e5f99f4b", 0x7d}], 0x4, &(0x7f00000006c0)=[@ip_retopts={{0xfc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0x6, [{@private=0xa010100}, {@remote}]}, @end, @noop, @timestamp_prespec={0x44, 0x44, 0x4f, 0x3, 0x5, [{@remote, 0xffffffc0}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0xffff}, {@rand_addr=0x64010100, 0xd5e8}, {@empty, 0xfffff801}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10c5}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0x68, 0x3, 0x4, [{@local, 0x389a}, {@private=0xa010100, 0x5}, {@private=0xa010100, 0x168}, {@multicast2, 0x2c00}, {@multicast2}, {@private=0xa010101, 0x7fffffff}, {@local, 0xe}, {@multicast2, 0x5}, {@local, 0x8001}]}, @rr={0x7, 0x1f, 0xf, [@rand_addr=0x64010100, @private=0xa010102, @broadcast, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @remote]}, @rr={0x7, 0xf, 0x1e, [@multicast1, @broadcast, @broadcast]}, @ssrr={0x89, 0xb, 0x7d, [@dev={0xac, 0x14, 0x14, 0x40}, @remote]}, @end, @timestamp={0x44, 0xc, 0xe9, 0x0, 0x1, [0x800, 0x8]}]}}}], 0x100}, 0x8840) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000a40)={0x7, 0x4, {0x0}, {0xee01}, 0x1, 0xfff}) r6 = syz_clone3(&(0x7f0000000ac0)={0x201000000, &(0x7f0000000800)=0xffffffffffffffff, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, {0x2f}, &(0x7f00000008c0)=""/139, 0x8b, &(0x7f0000000980)=""/168, &(0x7f0000000a80)=[r5], 0x1, {r1}}, 0x58) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000c40)={r0, &(0x7f0000000b40)='e\x00', 0x8000, &(0x7f0000000b80)={@align=0x984, {0x7, 0x4, 0x7b, 0x1}}, 0x9, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0x951f}) r10 = fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000000e80)={0x20000, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00), {0x2e}, &(0x7f0000000d40)=""/26, 0x1a, &(0x7f0000000d80)=""/147, &(0x7f0000000e40)=[r5, r10, r5, r9, r8, r9, r8, r8, r6], 0x9}, 0x58) write$P9_RSYMLINK(r1, &(0x7f0000000f00)={0x14, 0x11, 0x1, {0x80, 0x2, 0x8}}, 0x14) socket$packet(0x11, 0x2, 0x300) flistxattr(r0, &(0x7f0000000f40)=""/53, 0x35) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x18, 0x140e, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) close(r1) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001080)={r2, 0xdb, "07280416e0c1c682afa546a49c80b62b010afeea46d3c2ad6fd205527b848560195b48109ac5e6a040d31cfbf5a9ca19376e453f4c002d97853fcb3d73eaa3a7c97cae220c61c0e21412f50649cc4e46c7c4118db691b9eb1418aedc3e623f36457f12aef49e7af267af87279ffb9f29f7678a5d1ea89c0b6a6fe558519a1a5c38c7dedb064ce741d93ffb98a4f031e588c6010057d4368863e37e7aed0a78fd85d27dce5a3c9feeed97dd73da60329b5e3a38c56616d1c55598e0b1adbe1510f41039de353c0d977113241a34cabdb71dcfd9fbeb56c2216b0f4c"}, &(0x7f0000001180)=0xe3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000011c0)={r3, 0x7}, 0x8) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000001200)={"214ec0d2936180c026ce08c92aab2a4e54497e53d1ab57c2f00cba2412ff221f", r4, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001240)={{r11}, 0x0, 0xc, @unused=[0xd, 0x3, 0x2, 0x8000], @subvolid=0x6}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000002240)={0xffffffffffffffff, 0x2, 0x10001, 0x5, 0x1c5}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x130, r12, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x130}, 0x1, 0x0, 0x0, 0x14810}, 0x801) 1.812230255s ago: executing program 1 (id=1057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto(r0, &(0x7f00000006c0)='<', 0x1, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000e80)='X', 0x1}, {&(0x7f0000000140)="31c4e0844d5524c9416b9006c7c5a8eda2f25f88633a243f2c92956361f23e87beb1650dcac28cf27cdbbc3b9963b8c119a725c751413ff0fd89c21c8ab43257483577e9a28604d76bf935a7fce19cc0a749589572781262", 0x58}, {&(0x7f0000000480)="843d7692e049ebc24eb1ec6d57f5bfd70677003eea8aa14159992f4f21813c9cff934bed64374dd76186d5c3219bf3767a5c61452be9037ce4f23b35b7588113e5f4a5e3524c421ff34c7e9efbd4a803c310acf4d27807970a412a14e1ef9e7ae682a86918a9b0ef1b10", 0x6a}], 0x3) recvfrom(r0, &(0x7f0000001040)=""/230, 0xe6, 0x10000, 0x0, 0x0) 1.567708138s ago: executing program 6 (id=1058): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000200), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000380)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x2, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x9, 0x24, 0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000400)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x7f, 0x40000006}, 0x3c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000740), r3) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r3, 0x3, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3800000010003b15000000000000000000000000c05516c5c42ffcee0723891f5b", @ANYRES32=0x0, @ANYBLOB="40100500000000001800128008000100677470000c000280080003000000fe07"], 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x44, 0xe0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x2, 0x6, {0x7, 0x25, 0x1, 0x8, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x9, 0x5, {0x7, 0x25, 0x1, 0x0, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000ac0)={0x20, 0x0, 0xe, 0x0, 0x0, [{0x0, &(0x7f0000000440)=@string={0x0, 0x3, "f3813896cd131e0bc48815b5253ace52a3e0cf4da6136f6b363130a53fcc12fbba5c32ed767469ef548eb1c25778de6d8de53b3b44c45a7845df3cb0ae361c98e999cd665192a77a1d8f005f032ef935c62d594a0cdfa0133f66f7962271f49caefef127b617dc34070ca0cdd30d49968e54394d343c54113718909bd7256645bf98e10255a8aa5005bfc39cf1b6f06f22e5c9c1b487105dd68d0e17dd5d5133ad2ae06ce04cf503247accd8feec"}}, {0x0, &(0x7f0000000500)=@string={0x0, 0x3, "30ced4f6e7338683ead545e8fa1c7712978a8d21a97a29d953ef11a6eec26429ba4e56ad715c07900ce37e4372b3574414011c702f586d63f3c875dddd516a0a07c104607a1319e18be2dca73cb579fa2cbd62777a"}}, {0x0, &(0x7f0000000580)=@string={0x0, 0x3, "03b9f903ee776246c9949fe75ec4b94d1c30bdf75169dcca8929afe23943401b6e5e91c1e5a6c225a7eb87f5f09e6c7007811b6984c0775c19de1e35735fc0fcb95e85e9cff1233e344d053ff760bed20a111f6cb74fd1a75f533cb5039c6bc9e37f76405892ac08e07ebd60728c191cf0a4c86e78002687ca196ef21e"}}, {0x0, &(0x7f0000000600)=@string={0x0, 0x3, "a492012a84445e0dd2effde56183df1936c043a500f421f3b1bad351d2c3782730aa9329dde63de7f92964dbef8db5cbb9ed86771b329f4398eb27b84c265777a4609e2b5c8ba3bcde2cc0a56b0fa2490e58eca086a391b5388b71040638e790e3b0e4039326fa27abea9ad5552b5dff009687fdd6030477f9a183284fb1953ae79baeaf5dde3fe81d00000000000000c343237e68e62acef20eb6b561e797549ba52d4a9cbfcb42c26e6fd73b6bf106d31723ee8708007e750bff66fdbabc2e5ade52072266bf365c40118e54acb4de5c06d66c2add13897ff3f7a5d9eb7dd71e7bfdb450d6715c340a956c3079fde2733200"/256}}, {0x0, &(0x7f0000000b80)=@string={0x0, 0x3, "003b05f6e417ca896ee5a9db37dcdf3ad27245082171d0d24c1235e492fb5e31aea9b444eae2435f4e2ece3aed82bb8d3d5f677b16ebd82b62ef5ce9907c15e064198db1df95353317b16a7444b815d52f9c"}}, {0xfffffffffffffd30, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, {0x0, &(0x7f0000000880)=@lang_id={0x0, 0x3, 0x457}}, {0x0, &(0x7f0000000900)=@lang_id={0x0, 0x3, 0x41f}}, {0x0, &(0x7f00000009c0)=@string={0x0, 0x3, "c773cb6b359145cde497767649fdd34d658754373db9d043d1677721ac6ea36f8da0e2dcd0b73d6bd31c6ce25c8b1c9ceb3c4b0138ab347c5cca8ab0046f60ea638c1663fc54c28493847fd01990bf1807078517958465bb6ca07116f4f452c99cf2aa7030251015bf39e88fc7555de351f9076c6faed893fdf149251dd3cefc782de54e912600ad1cf94260a146c18e2e7f31cf93c2096d6a18b5b8af4817341d102d80c4ae93271a5195f248649fc2dc574b5402ec1b8be3d22dd5dff3ddc89f38d4dc26e4f4e795635956add9e65b0de0a4151a69a10588c97cab3289cfd3ee"}}]}) readahead(0xffffffffffffffff, 0x400, 0x9) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdffb, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8001}, 0x1050) 184.297769ms ago: executing program 8 (id=1059): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x442, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file2\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x7}}, 0x40) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, @by_dev={r2}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@raid={0x0, 0x3cd0, 0x0, 0x78, 'raid\x00', {'raid5_ra', 0x20, '3 64 daemon_sleep 100', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 0s ago: executing program 0 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00', 0x4, 0xfd90, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x366, 0x10, &(0x7f0000000700), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r1, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 1) kernel console output (not intermixed with test programs): yzkaller #0 PREEMPT_{RT,(full)} [ 482.735602][ T9233] Tainted: [Y]=FORCED_BIND [ 482.735610][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 482.735623][ T9233] Call Trace: [ 482.735632][ T9233] [ 482.735641][ T9233] dump_stack_lvl+0xe8/0x150 [ 482.735679][ T9233] should_fail_ex+0x46b/0x600 [ 482.735717][ T9233] _copy_from_user+0x2d/0xb0 [ 482.735749][ T9233] __sys_bpf+0x2e7/0xd90 [ 482.735780][ T9233] ? __pfx___sys_bpf+0x10/0x10 [ 482.735805][ T9233] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 482.735832][ T9233] ? rt_mutex_slowunlock+0x219/0x460 [ 482.735879][ T9233] ? ksys_write+0x248/0x270 [ 482.735913][ T9233] ? __pfx_ksys_write+0x10/0x10 [ 482.735948][ T9233] __x64_sys_bpf+0xba/0xd0 [ 482.735983][ T9233] do_syscall_64+0x166/0x520 [ 482.736022][ T9233] ? trace_irq_disable+0x3b/0x140 [ 482.736055][ T9233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.736079][ T9233] ? clear_bhb_loop+0x70/0xc0 [ 482.736107][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.736130][ T9233] RIP: 0033:0x7f21b29cf559 [ 482.736150][ T9233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.736170][ T9233] RSP: 002b:00007f21b0c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.736194][ T9233] RAX: ffffffffffffffda RBX: 00007f21b2c55fa0 RCX: 00007f21b29cf559 [ 482.736211][ T9233] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 482.736226][ T9233] RBP: 00007f21b0c26090 R08: 0000000000000000 R09: 0000000000000000 [ 482.736240][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.736255][ T9233] R13: 00007f21b2c56038 R14: 00007f21b2c55fa0 R15: 00007ffe6cb12388 [ 482.736291][ T9233] [ 482.977960][ T35] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 483.004797][ T35] usb 7-1: device descriptor read/8, error -71 [ 483.108411][ T35] usb usb7-port1: unable to enumerate USB device [ 484.161116][ T8728] veth0_vlan: entered promiscuous mode [ 484.165313][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.194085][ T8728] veth1_vlan: entered promiscuous mode [ 484.243945][ T8728] veth0_macvtap: entered promiscuous mode [ 484.264433][ T8728] veth1_macvtap: entered promiscuous mode [ 484.298190][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.344401][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.415941][ T9257] FAULT_INJECTION: forcing a failure. [ 484.415941][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 484.415985][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.1.806 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 484.416012][ T9257] Tainted: [Y]=FORCED_BIND [ 484.416019][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.416031][ T9257] Call Trace: [ 484.416039][ T9257] [ 484.416048][ T9257] dump_stack_lvl+0xe8/0x150 [ 484.416084][ T9257] should_fail_ex+0x46b/0x600 [ 484.416138][ T9257] should_failslab+0xa8/0x100 [ 484.416167][ T9257] __kmalloc_noprof+0xf6/0x790 [ 484.416189][ T9257] ? tomoyo_realpath_from_path+0xef/0x640 [ 484.416217][ T9257] ? tomoyo_realpath_from_path+0xef/0x640 [ 484.416254][ T9257] tomoyo_realpath_from_path+0xef/0x640 [ 484.416294][ T9257] ? tomoyo_path_number_perm+0x219/0x5f0 [ 484.416319][ T9257] tomoyo_path_number_perm+0x246/0x5f0 [ 484.416346][ T9257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.416370][ T9257] ? __lock_acquire+0x747/0x2de0 [ 484.416415][ T9257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 484.416458][ T9257] ? __fget_files+0x2a/0x420 [ 484.416491][ T9257] ? __fget_files+0x2a/0x420 [ 484.416521][ T9257] ? __fget_files+0x2a/0x420 [ 484.416555][ T9257] security_file_ioctl+0xc3/0x2a0 [ 484.416583][ T9257] __se_sys_ioctl+0x47/0x170 [ 484.416608][ T9257] do_syscall_64+0x166/0x520 [ 484.416629][ T9257] ? trace_irq_disable+0x3b/0x140 [ 484.416664][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.416686][ T9257] ? clear_bhb_loop+0x70/0xc0 [ 484.416713][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.416734][ T9257] RIP: 0033:0x7f8f9d08f559 [ 484.416754][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.416773][ T9257] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.416796][ T9257] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 484.416812][ T9257] RDX: 0000000000000011 RSI: 00000000400454d0 RDI: 0000000000000003 [ 484.416826][ T9257] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 484.416841][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.416853][ T9257] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 484.416887][ T9257] [ 484.453593][ T9257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 487.317354][ T3324] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.372608][ T8201] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.374980][ T8201] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.386278][ T8201] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.074321][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.074341][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.639938][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.639961][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.675231][ T8951] veth0_vlan: entered promiscuous mode [ 488.749368][ T8951] veth1_vlan: entered promiscuous mode [ 488.901653][ T8951] veth0_macvtap: entered promiscuous mode [ 488.936056][ T8951] veth1_macvtap: entered promiscuous mode [ 488.948122][ T9314] md: md0 stopped. [ 488.973257][ T9314] md: md0 stopped. [ 488.977252][ T1243] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 489.104578][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.133684][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.148307][ T1243] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.156851][ T1243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.156878][ T1243] usb 7-1: Product: syz [ 489.156894][ T1243] usb 7-1: Manufacturer: syz [ 489.156915][ T1243] usb 7-1: SerialNumber: syz [ 489.195753][ T1243] usb 7-1: config 0 descriptor?? [ 489.347125][ T3308] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.347174][ T3308] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.347352][ T3308] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.407223][ T6334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.459746][ T1243] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 489.813091][ T9319] FAULT_INJECTION: forcing a failure. [ 489.813091][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 489.813131][ T9319] CPU: 1 UID: 0 PID: 9319 Comm: syz.1.818 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 489.813160][ T9319] Tainted: [Y]=FORCED_BIND [ 489.813167][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.813186][ T9319] Call Trace: [ 489.813195][ T9319] [ 489.813205][ T9319] dump_stack_lvl+0xe8/0x150 [ 489.813245][ T9319] should_fail_ex+0x46b/0x600 [ 489.813288][ T9319] should_failslab+0xa8/0x100 [ 489.813314][ T9319] ? vm_area_dup+0x28/0x750 [ 489.813339][ T9319] kmem_cache_alloc_noprof+0x99/0x680 [ 489.813376][ T9319] ? vm_area_dup+0x28/0x750 [ 489.813405][ T9319] vm_area_dup+0x28/0x750 [ 489.813427][ T9319] ? __split_vma+0x1b7/0xa00 [ 489.813456][ T9319] __split_vma+0x1d7/0xa00 [ 489.813496][ T9319] ? __pfx___split_vma+0x10/0x10 [ 489.813524][ T9319] ? __mpol_equal+0x139/0x370 [ 489.813554][ T9319] ? can_vma_merge_right+0x1a1/0x6e0 [ 489.813596][ T9319] vma_modify+0x1483/0x1ba0 [ 489.813620][ T9319] ? vma_modify+0x161/0x1ba0 [ 489.813642][ T9319] ? vma_modify+0x60/0x1ba0 [ 489.813677][ T9319] vma_modify_policy+0x289/0x340 [ 489.813705][ T9319] ? __pfx_vma_modify_policy+0x10/0x10 [ 489.813757][ T9319] mbind_range+0x2c1/0x800 [ 489.813793][ T9319] __se_sys_mbind+0xacd/0x10e0 [ 489.813822][ T9319] ? __pfx___se_sys_mbind+0x10/0x10 [ 489.813852][ T9319] ? __se_sys_futex+0x3a8/0x450 [ 489.813885][ T9319] ? rcu_is_watching+0x16/0xb0 [ 489.813911][ T9319] ? __x64_sys_mbind+0x21/0xf0 [ 489.813937][ T9319] do_syscall_64+0x166/0x520 [ 489.813957][ T9319] ? trace_irq_disable+0x3b/0x140 [ 489.813990][ T9319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.814011][ T9319] ? clear_bhb_loop+0x70/0xc0 [ 489.814037][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.814057][ T9319] RIP: 0033:0x7f8f9d08f559 [ 489.814077][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.814096][ T9319] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 489.814120][ T9319] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 489.814138][ T9319] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 489.814151][ T9319] RBP: 00007f8f9d126b20 R08: 0000000000000006 R09: 0000000000000000 [ 489.814165][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.814179][ T9319] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 489.814212][ T9319] [ 490.077184][ T30] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 490.233654][ T30] usb 2-1: unable to get BOS descriptor set [ 490.233718][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 490.259743][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.259769][ T30] usb 2-1: Product: syz [ 490.259784][ T30] usb 2-1: Manufacturer: Ñ‹ [ 490.259797][ T30] usb 2-1: SerialNumber: syz [ 490.891572][ T9319] fuse: Unknown parameter 'rootmodå' [ 491.203034][ T1243] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 491.254129][ T1243] usb 7-1: USB disconnect, device number 12 [ 491.631545][ T30] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.631956][ T30] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 491.632619][ T1505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.632634][ T1505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.696150][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.820'. [ 491.749458][ T9329] ip6tnl0: entered promiscuous mode [ 491.795847][ T30] usb 2-1: USB disconnect, device number 51 [ 492.059736][ T1505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.059760][ T1505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.610375][ T9349] FAULT_INJECTION: forcing a failure. [ 492.610375][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 492.610415][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.8.827 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 492.610447][ T9349] Tainted: [Y]=FORCED_BIND [ 492.610456][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.610482][ T9349] Call Trace: [ 492.610490][ T9349] [ 492.610499][ T9349] dump_stack_lvl+0xe8/0x150 [ 492.610536][ T9349] should_fail_ex+0x46b/0x600 [ 492.610575][ T9349] should_failslab+0xa8/0x100 [ 492.610614][ T9349] __kmalloc_cache_noprof+0x9c/0x670 [ 492.610637][ T9349] ? proc_thread_self_get_link+0xfc/0x190 [ 492.610659][ T9349] ? proc_thread_self_get_link+0xfc/0x190 [ 492.610682][ T9349] ? __task_pid_nr_ns+0x399/0x470 [ 492.610709][ T9349] proc_thread_self_get_link+0xfc/0x190 [ 492.610733][ T9349] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 492.610757][ T9349] pick_link+0x72a/0xfd0 [ 492.610796][ T9349] step_into_slowpath+0x58a/0x820 [ 492.610830][ T9349] ? __pfx_step_into_slowpath+0x10/0x10 [ 492.610864][ T9349] ? bpf_lsm_inode_permission+0x9/0x20 [ 492.610895][ T9349] link_path_walk+0xd50/0x1910 [ 492.610943][ T9349] path_openat+0x1bc/0x2100 [ 492.610996][ T9349] do_file_open+0x23e/0x4a0 [ 492.611028][ T9349] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 492.611056][ T9349] ? __pfx_do_file_open+0x10/0x10 [ 492.611111][ T9349] ? alloc_fd+0x6b2/0x760 [ 492.611152][ T9349] do_sys_openat2+0x115/0x200 [ 492.611177][ T9349] ? __se_sys_futex+0x3a8/0x450 [ 492.611203][ T9349] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.611235][ T9349] ? rcu_is_watching+0x16/0xb0 [ 492.611262][ T9349] __x64_sys_openat+0x138/0x170 [ 492.611293][ T9349] do_syscall_64+0x166/0x520 [ 492.611314][ T9349] ? trace_irq_disable+0x3b/0x140 [ 492.611345][ T9349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.611366][ T9349] ? clear_bhb_loop+0x70/0xc0 [ 492.611393][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.611415][ T9349] RIP: 0033:0x7ff63598fd8e [ 492.611435][ T9349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.611453][ T9349] RSP: 002b:00007ff633c1df98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.611477][ T9349] RAX: ffffffffffffffda RBX: 00007ff633c1e6c0 RCX: 00007ff63598fd8e [ 492.611493][ T9349] RDX: 0000000000000002 RSI: 00007ff635a6641a RDI: ffffffffffffff9c [ 492.611508][ T9349] RBP: 00007ff635a66b20 R08: 0000000000000000 R09: 0000000000000000 [ 492.611522][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.611534][ T9349] R13: 00007ff635c56038 R14: 00007ff635c55fa0 R15: 00007ffecea141f8 [ 492.611568][ T9349] [ 492.933842][ T9350] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 492.933956][ T9350] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 493.109098][ T9354] FAULT_INJECTION: forcing a failure. [ 493.109098][ T9354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.109141][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.8.829 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 493.109174][ T9354] Tainted: [Y]=FORCED_BIND [ 493.109183][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.109198][ T9354] Call Trace: [ 493.109207][ T9354] [ 493.109217][ T9354] dump_stack_lvl+0xe8/0x150 [ 493.109258][ T9354] should_fail_ex+0x46b/0x600 [ 493.109301][ T9354] _copy_from_user+0x2d/0xb0 [ 493.109339][ T9354] do_tcp_setsockopt+0x504/0x1f80 [ 493.109376][ T9354] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 493.109415][ T9354] ? __fget_files+0x2a/0x420 [ 493.109452][ T9354] ? sock_common_setsockopt+0x36/0xc0 [ 493.109483][ T9354] ? tcp_setsockopt+0x3d/0xe0 [ 493.109509][ T9354] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.109544][ T9354] do_sock_setsockopt+0x17c/0x1b0 [ 493.109587][ T9354] __x64_sys_setsockopt+0x143/0x1b0 [ 493.109629][ T9354] do_syscall_64+0x166/0x520 [ 493.109653][ T9354] ? trace_irq_disable+0x3b/0x140 [ 493.109691][ T9354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.109715][ T9354] ? clear_bhb_loop+0x70/0xc0 [ 493.109745][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.109769][ T9354] RIP: 0033:0x7ff6359cf559 [ 493.109791][ T9354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.109810][ T9354] RSP: 002b:00007ff633c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.109836][ T9354] RAX: ffffffffffffffda RBX: 00007ff635c55fa0 RCX: 00007ff6359cf559 [ 493.109854][ T9354] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 493.109869][ T9354] RBP: 00007ff633c1e090 R08: 0000000000000078 R09: 0000000000000000 [ 493.109884][ T9354] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 493.109900][ T9354] R13: 00007ff635c56038 R14: 00007ff635c55fa0 R15: 00007ffecea141f8 [ 493.109938][ T9354] [ 493.263260][ T5713] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 493.474947][ T5713] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 493.497691][ T5713] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 493.497723][ T5713] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 493.497744][ T5713] usb 2-1: config 0 has no interface number 0 [ 493.544010][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.544037][ T5713] usb 2-1: Product: syz [ 493.544051][ T5713] usb 2-1: Manufacturer: syz [ 493.544065][ T5713] usb 2-1: SerialNumber: syz [ 493.591674][ T5713] usb 2-1: config 0 descriptor?? [ 493.839614][ T3357] IPVS: starting estimator thread 0... [ 493.939429][ T9368] IPVS: using max 8 ests per chain, 19200 per kthread [ 494.065872][ T5713] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 494.065909][ T5713] uvcvideo 2-1:0.64: No valid video chain found. [ 494.097315][ T3242] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 494.251477][ T3242] usb 9-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 494.254496][ T3242] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1023 [ 494.292278][ T3242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.292306][ T3242] usb 9-1: Product: syz [ 494.292322][ T3242] usb 9-1: Manufacturer: syz [ 494.292338][ T3242] usb 9-1: SerialNumber: syz [ 494.340717][ T5713] usb 2-1: USB disconnect, device number 52 [ 494.605154][ T3242] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 494.618704][ T3242] usb 9-1: unit 5 not found! [ 494.639792][ T30] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 494.781558][ T3242] usb 9-1: USB disconnect, device number 2 [ 494.797395][ T30] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 494.802256][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.802301][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.844603][ T30] usb 7-1: config 0 descriptor?? [ 495.041938][ T8718] udevd[8718]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.350444][ T9399] netlink: 'syz.7.840': attribute type 1 has an invalid length. [ 495.470488][ T9406] FAULT_INJECTION: forcing a failure. [ 495.470488][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.470520][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.0.842 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 495.470543][ T9406] Tainted: [Y]=FORCED_BIND [ 495.470549][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 495.470560][ T9406] Call Trace: [ 495.470566][ T9406] [ 495.470574][ T9406] dump_stack_lvl+0xe8/0x150 [ 495.470605][ T9406] should_fail_ex+0x46b/0x600 [ 495.470637][ T9406] _copy_from_user+0x2d/0xb0 [ 495.470665][ T9406] ___sys_recvmsg+0x173/0x5a0 [ 495.470690][ T9406] ? __pfx____sys_recvmsg+0x10/0x10 [ 495.470712][ T9406] ? lock_acquire+0x115/0x350 [ 495.470749][ T9406] ? __fget_files+0x2a/0x420 [ 495.470772][ T9406] ? __fget_files+0x3a8/0x420 [ 495.470794][ T9406] ? __fget_files+0x2a/0x420 [ 495.470828][ T9406] __x64_sys_recvmsg+0x1b4/0x290 [ 495.470851][ T9406] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 495.470889][ T9406] do_syscall_64+0x166/0x520 [ 495.470907][ T9406] ? trace_irq_disable+0x3b/0x140 [ 495.470934][ T9406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.470953][ T9406] ? clear_bhb_loop+0x70/0xc0 [ 495.470975][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.470991][ T9406] RIP: 0033:0x7f21b29cf559 [ 495.471008][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.471025][ T9406] RSP: 002b:00007f21b0c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 495.471047][ T9406] RAX: ffffffffffffffda RBX: 00007f21b2c55fa0 RCX: 00007f21b29cf559 [ 495.471062][ T9406] RDX: 0000000000010140 RSI: 0000200000000180 RDI: 0000000000000003 [ 495.471076][ T9406] RBP: 00007f21b0c26090 R08: 0000000000000000 R09: 0000000000000000 [ 495.471089][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.471102][ T9406] R13: 00007f21b2c56038 R14: 00007f21b2c55fa0 R15: 00007ffe6cb12388 [ 495.471136][ T9406] [ 495.679541][ T3242] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 495.743487][ T30] ath6kl: Failed to read usb control message: -71 [ 495.743538][ T30] ath6kl: Unable to read the bmi data from the device: -71 [ 495.743554][ T30] ath6kl: unable to read target info byte count: -71 [ 495.745108][ T30] ath6kl: Failed to init ath6kl core: -71 [ 495.745622][ T30] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 495.792145][ T30] usb 7-1: USB disconnect, device number 13 [ 495.900510][ T3242] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 495.920011][ T3242] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 495.920040][ T3242] usb 9-1: config 179 has no interface number 0 [ 495.920096][ T3242] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 495.920194][ T3242] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 495.920225][ T3242] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 495.920254][ T3242] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 495.920278][ T3242] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 495.920332][ T3242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.038864][ T9403] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 496.139758][ T3242] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 497.287312][ T5713] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 497.498093][ T5713] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 497.499612][ T5713] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 497.499648][ T5713] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 497.499671][ T5713] usb 1-1: config 0 has no interface number 0 [ 497.503953][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.503978][ T5713] usb 1-1: Product: syz [ 497.503994][ T5713] usb 1-1: Manufacturer: syz [ 497.504009][ T5713] usb 1-1: SerialNumber: syz [ 497.650675][ T5713] usb 1-1: config 0 descriptor?? [ 498.915354][ T5713] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 498.915390][ T5713] uvcvideo 1-1:0.64: No valid video chain found. [ 499.139942][ T9] usb 1-1: USB disconnect, device number 30 [ 499.327136][ T5854] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 499.488884][ T5854] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 499.490362][ T5854] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.490417][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.571897][ T5854] usb 7-1: config 0 descriptor?? [ 499.792381][ T5854] ath6kl: Failed to submit usb control message: -71 [ 499.792434][ T5854] ath6kl: unable to send the bmi data to the device: -71 [ 499.792451][ T5854] ath6kl: Unable to send get target info: -71 [ 499.793579][ T9] usb 9-1: USB disconnect, device number 3 [ 499.795158][ T5854] ath6kl: Failed to init ath6kl core: -71 [ 499.795658][ T5854] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 500.016178][ T5854] usb 7-1: USB disconnect, device number 14 [ 500.357149][ T5713] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 500.520036][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 500.521629][ T5713] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 500.524691][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.524714][ T5713] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 500.564503][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.564528][ T5713] usb 1-1: Product: syz [ 500.564543][ T5713] usb 1-1: Manufacturer: syz [ 500.564558][ T5713] usb 1-1: SerialNumber: syz [ 500.737209][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 500.908891][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 500.919625][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 500.976034][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.976064][ T9] usb 9-1: Product: syz [ 500.976080][ T9] usb 9-1: Manufacturer: syz [ 500.976095][ T9] usb 9-1: SerialNumber: syz [ 501.018798][ T9] usb 9-1: config 0 descriptor?? [ 501.034237][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.034907][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.058926][ T5713] usb 1-1: USB disconnect, device number 31 [ 501.083839][ T9473] FAULT_INJECTION: forcing a failure. [ 501.083839][ T9473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.083875][ T9473] CPU: 1 UID: 0 PID: 9473 Comm: syz.6.858 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 501.083903][ T9473] Tainted: [Y]=FORCED_BIND [ 501.083911][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 501.083924][ T9473] Call Trace: [ 501.083932][ T9473] [ 501.083942][ T9473] dump_stack_lvl+0xe8/0x150 [ 501.083979][ T9473] should_fail_ex+0x46b/0x600 [ 501.084016][ T9473] _copy_from_user+0x2d/0xb0 [ 501.084050][ T9473] ___sys_sendmsg+0x1c6/0x360 [ 501.084070][ T9473] ? __lock_acquire+0x747/0x2de0 [ 501.084105][ T9473] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.084163][ T9473] ? __fget_files+0x3a8/0x420 [ 501.084193][ T9473] ? __fget_files+0x2a/0x420 [ 501.084234][ T9473] __x64_sys_sendmsg+0x1b7/0x290 [ 501.084260][ T9473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.084311][ T9473] do_syscall_64+0x166/0x520 [ 501.084333][ T9473] ? trace_irq_disable+0x3b/0x140 [ 501.084365][ T9473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.084387][ T9473] ? clear_bhb_loop+0x70/0xc0 [ 501.084413][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.084436][ T9473] RIP: 0033:0x7f1e4fdcf559 [ 501.084455][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.084474][ T9473] RSP: 002b:00007f1e4e01e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.084497][ T9473] RAX: ffffffffffffffda RBX: 00007f1e50055fa0 RCX: 00007f1e4fdcf559 [ 501.084513][ T9473] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 501.084527][ T9473] RBP: 00007f1e4e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 501.084540][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.084553][ T9473] R13: 00007f1e50056038 R14: 00007f1e50055fa0 R15: 00007fffef020a38 [ 501.084587][ T9473] [ 501.329567][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 501.427483][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427552][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.275966][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 502.295937][ T9] usb 9-1: USB disconnect, device number 4 [ 502.377142][ T5713] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 502.527989][ T5713] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 502.532543][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.532569][ T5713] usb 1-1: Product: syz [ 502.532584][ T5713] usb 1-1: Manufacturer: syz [ 502.532600][ T5713] usb 1-1: SerialNumber: syz [ 502.575258][ T5713] usb 1-1: config 0 descriptor?? [ 502.745093][ T9493] netlink: 'syz.7.863': attribute type 2 has an invalid length. [ 502.745120][ T9493] netlink: 'syz.7.863': attribute type 5 has an invalid length. [ 502.745202][ T9493] netlink: 'syz.7.863': attribute type 2 has an invalid length. [ 502.745219][ T9493] netlink: 'syz.7.863': attribute type 5 has an invalid length. [ 502.806472][ T5713] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 503.020788][ T9497] MTD: Couldn't look up '/dev/sr0': -2 [ 503.081404][ T9497] netlink: 'syz.6.864': attribute type 8 has an invalid length. [ 503.187373][ T9502] netlink: 4256 bytes leftover after parsing attributes in process `syz.1.867'. [ 503.187411][ T9502] netlink: 4256 bytes leftover after parsing attributes in process `syz.1.867'. [ 503.187430][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 503.307140][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 503.425538][ T9508] FAULT_INJECTION: forcing a failure. [ 503.425538][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 503.425587][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.6.870 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 503.425615][ T9508] Tainted: [Y]=FORCED_BIND [ 503.425623][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 503.425635][ T9508] Call Trace: [ 503.425643][ T9508] [ 503.425652][ T9508] dump_stack_lvl+0xe8/0x150 [ 503.425687][ T9508] should_fail_ex+0x46b/0x600 [ 503.425725][ T9508] should_failslab+0xa8/0x100 [ 503.425752][ T9508] __kmalloc_noprof+0xf6/0x790 [ 503.425773][ T9508] ? kernfs_fop_write_iter+0x158/0x540 [ 503.425813][ T9508] ? kernfs_fop_write_iter+0x158/0x540 [ 503.425848][ T9508] kernfs_fop_write_iter+0x158/0x540 [ 503.425881][ T9508] vfs_write+0x61e/0xbb0 [ 503.425922][ T9508] ? __pfx_vfs_write+0x10/0x10 [ 503.425957][ T9508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 503.425984][ T9508] ? mutex_lock_nested+0x14d/0x1d0 [ 503.426010][ T9508] ? fdget_pos+0x11e/0x160 [ 503.426049][ T9508] ksys_write+0x156/0x270 [ 503.426085][ T9508] ? __pfx_ksys_write+0x10/0x10 [ 503.426138][ T9508] do_syscall_64+0x166/0x520 [ 503.426160][ T9508] ? trace_irq_disable+0x3b/0x140 [ 503.426190][ T9508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.426214][ T9508] ? clear_bhb_loop+0x70/0xc0 [ 503.426241][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.426264][ T9508] RIP: 0033:0x7f1e4fdcf559 [ 503.426283][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.426301][ T9508] RSP: 002b:00007f1e4e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.426324][ T9508] RAX: ffffffffffffffda RBX: 00007f1e50055fa0 RCX: 00007f1e4fdcf559 [ 503.426339][ T9508] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 503.426352][ T9508] RBP: 00007f1e4e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 503.426366][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.426379][ T9508] R13: 00007f1e50056038 R14: 00007f1e50055fa0 R15: 00007fffef020a38 [ 503.426415][ T9508] [ 503.458045][ T9] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.548082][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.679892][ T9] usb 8-1: config 0 descriptor?? [ 503.733046][ T9510] FAULT_INJECTION: forcing a failure. [ 503.733046][ T9510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.733304][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.1.869 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 503.733351][ T9510] Tainted: [Y]=FORCED_BIND [ 503.733362][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 503.733375][ T9510] Call Trace: [ 503.733383][ T9510] [ 503.733392][ T9510] dump_stack_lvl+0xe8/0x150 [ 503.733430][ T9510] should_fail_ex+0x46b/0x600 [ 503.733470][ T9510] _copy_from_user+0x2d/0xb0 [ 503.733505][ T9510] ___sys_sendmsg+0x1c6/0x360 [ 503.733526][ T9510] ? __lock_acquire+0x747/0x2de0 [ 503.733560][ T9510] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.733628][ T9510] ? __fget_files+0x3a8/0x420 [ 503.733656][ T9510] ? __fget_files+0x2a/0x420 [ 503.733693][ T9510] __x64_sys_sendmsg+0x1b7/0x290 [ 503.733716][ T9510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.733757][ T9510] do_syscall_64+0x166/0x520 [ 503.733778][ T9510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.733799][ T9510] ? clear_bhb_loop+0x70/0xc0 [ 503.733824][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.733844][ T9510] RIP: 0033:0x7f8f9d08f559 [ 503.733862][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.733879][ T9510] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.733899][ T9510] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 503.733914][ T9510] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 503.733927][ T9510] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 503.733940][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.733953][ T9510] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 503.733986][ T9510] [ 503.948260][ T9] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 503.948315][ T5713] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 504.276438][ T9] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 504.276471][ T9] [drm] Initialized udl on minor 1 [ 504.318890][ T3242] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 504.477121][ T3242] usb 9-1: Using ep0 maxpacket: 32 [ 504.478350][ T3242] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 504.478472][ T3242] usb 9-1: no configurations [ 504.478489][ T3242] usb 9-1: can't read configurations, error -22 [ 504.607144][ T3242] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 504.787169][ T3242] usb 9-1: Using ep0 maxpacket: 32 [ 504.788361][ T3242] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 504.788482][ T3242] usb 9-1: no configurations [ 504.788504][ T3242] usb 9-1: can't read configurations, error -22 [ 504.789187][ T3242] usb usb9-port1: attempt power cycle [ 505.199888][ T3242] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 505.221254][ T3242] usb 9-1: Using ep0 maxpacket: 32 [ 505.223889][ T3242] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 505.224008][ T3242] usb 9-1: no configurations [ 505.224023][ T3242] usb 9-1: can't read configurations, error -22 [ 505.312553][ T3241] usb 1-1: USB disconnect, device number 32 [ 505.357112][ T3242] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 505.377968][ T3242] usb 9-1: Using ep0 maxpacket: 32 [ 505.379161][ T3242] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 505.379278][ T3242] usb 9-1: no configurations [ 505.379292][ T3242] usb 9-1: can't read configurations, error -22 [ 505.421415][ T3242] usb usb9-port1: unable to enumerate USB device [ 508.925137][ T3241] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 509.331170][ T9552] 9pnet_fd: p9_fd_create_tcp (9552): problem connecting socket to 127.0.0.1 [ 509.409754][ T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 509.439164][ T9] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 509.471430][ T9] usb 8-1: USB disconnect, device number 2 [ 510.047181][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 510.205556][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 510.221872][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.221903][ T9] usb 8-1: Product: syz [ 510.221919][ T9] usb 8-1: Manufacturer: syz [ 510.221936][ T9] usb 8-1: SerialNumber: syz [ 510.274211][ T9] usb 8-1: config 0 descriptor?? [ 510.350815][ T9580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.462255][ T9585] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 510.462292][ T9585] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 510.498652][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 510.737263][ T5713] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 510.888894][ T5713] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 510.890562][ T5713] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 510.890590][ T5713] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 510.890612][ T5713] usb 7-1: config 0 has no interface number 0 [ 510.900108][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.900198][ T5713] usb 7-1: Product: syz [ 510.900228][ T5713] usb 7-1: Manufacturer: syz [ 510.900245][ T5713] usb 7-1: SerialNumber: syz [ 510.931213][ T5713] usb 7-1: config 0 descriptor?? [ 511.341662][ T9595] 0x0000000000ec-0x0000000000f2 : "" [ 511.374129][ T5713] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 511.374179][ T5713] uvcvideo 7-1:0.64: No valid video chain found. [ 511.391318][ T9595] ftl_cs: FTL header corrupt! [ 511.565083][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 511.591560][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 511.623117][ T9] usb 7-1: USB disconnect, device number 16 [ 511.741351][ T30] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 511.745974][ T30] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.746026][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.792300][ T30] usb 9-1: config 0 descriptor?? [ 511.894707][ T9606] md: md1 stopped. [ 511.978676][ T9606] md: md1 stopped. [ 512.030682][ T30] ath6kl: Failed to submit usb control message: -71 [ 512.030737][ T30] ath6kl: unable to send the bmi data to the device: -71 [ 512.030755][ T30] ath6kl: Unable to send get target info: -71 [ 512.038206][ T30] ath6kl: Failed to init ath6kl core: -71 [ 512.086295][ T30] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 512.193535][ T30] usb 9-1: USB disconnect, device number 9 [ 512.795752][ T35] usb 8-1: USB disconnect, device number 3 [ 513.224704][ T9632] FAULT_INJECTION: forcing a failure. [ 513.224704][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.224753][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.6.901 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 513.224781][ T9632] Tainted: [Y]=FORCED_BIND [ 513.224789][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 513.224802][ T9632] Call Trace: [ 513.224810][ T9632] [ 513.224819][ T9632] dump_stack_lvl+0xe8/0x150 [ 513.224855][ T9632] should_fail_ex+0x46b/0x600 [ 513.224893][ T9632] _copy_from_user+0x2d/0xb0 [ 513.224927][ T9632] ___sys_sendmsg+0x1c6/0x360 [ 513.224948][ T9632] ? __lock_acquire+0x747/0x2de0 [ 513.224983][ T9632] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.225041][ T9632] ? __fget_files+0x3a8/0x420 [ 513.225070][ T9632] ? __fget_files+0x2a/0x420 [ 513.225107][ T9632] __x64_sys_sendmsg+0x1b7/0x290 [ 513.225131][ T9632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.225174][ T9632] do_syscall_64+0x166/0x520 [ 513.225195][ T9632] ? trace_irq_disable+0x3b/0x140 [ 513.225243][ T9632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.225267][ T9632] ? clear_bhb_loop+0x70/0xc0 [ 513.225294][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.225317][ T9632] RIP: 0033:0x7f1e4fdcf559 [ 513.225336][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.225355][ T9632] RSP: 002b:00007f1e4e01e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.225378][ T9632] RAX: ffffffffffffffda RBX: 00007f1e50055fa0 RCX: 00007f1e4fdcf559 [ 513.225395][ T9632] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000003 [ 513.225410][ T9632] RBP: 00007f1e4e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 513.225428][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.225441][ T9632] R13: 00007f1e50056038 R14: 00007f1e50055fa0 R15: 00007fffef020a38 [ 513.225476][ T9632] [ 513.702873][ T9636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.903'. [ 514.029696][ T9642] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 514.029814][ T9642] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 514.327425][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 514.483280][ T30] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 514.484958][ T30] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 514.484985][ T30] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 514.485005][ T30] usb 8-1: config 0 has no interface number 0 [ 514.527544][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.527570][ T30] usb 8-1: Product: syz [ 514.527585][ T30] usb 8-1: Manufacturer: syz [ 514.527599][ T30] usb 8-1: SerialNumber: syz [ 514.582963][ T30] usb 8-1: config 0 descriptor?? [ 514.717199][ T5729] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 514.888234][ T5729] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 514.915314][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.915342][ T5729] usb 1-1: Product: syz [ 514.915357][ T5729] usb 1-1: Manufacturer: syz [ 514.915373][ T5729] usb 1-1: SerialNumber: syz [ 515.160244][ T30] uvcvideo 8-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 515.160284][ T30] uvcvideo 8-1:0.64: No valid video chain found. [ 515.372236][ T1002] usb 8-1: USB disconnect, device number 4 [ 515.494385][ T9665] FAULT_INJECTION: forcing a failure. [ 515.494385][ T9665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.494427][ T9665] CPU: 0 UID: 0 PID: 9665 Comm: syz.8.914 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 515.494455][ T9665] Tainted: [Y]=FORCED_BIND [ 515.494463][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 515.494475][ T9665] Call Trace: [ 515.494484][ T9665] [ 515.494493][ T9665] dump_stack_lvl+0xe8/0x150 [ 515.494530][ T9665] should_fail_ex+0x46b/0x600 [ 515.494567][ T9665] strncpy_from_user+0x36/0x2c0 [ 515.494602][ T9665] path_setxattrat+0x191/0x450 [ 515.494633][ T9665] ? __pfx_path_setxattrat+0x10/0x10 [ 515.494681][ T9665] ? ksys_write+0x248/0x270 [ 515.494714][ T9665] ? __pfx_ksys_write+0x10/0x10 [ 515.494750][ T9665] __x64_sys_setxattr+0xbc/0xe0 [ 515.494784][ T9665] do_syscall_64+0x166/0x520 [ 515.494805][ T9665] ? trace_irq_disable+0x3b/0x140 [ 515.494836][ T9665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.494858][ T9665] ? clear_bhb_loop+0x70/0xc0 [ 515.494884][ T9665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.494906][ T9665] RIP: 0033:0x7ff6359cf559 [ 515.494925][ T9665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.494943][ T9665] RSP: 002b:00007ff633bdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 515.494966][ T9665] RAX: ffffffffffffffda RBX: 00007ff635c56180 RCX: 00007ff6359cf559 [ 515.494982][ T9665] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 515.495005][ T9665] RBP: 00007ff633bdc090 R08: 0000000000000003 R09: 0000000000000000 [ 515.495018][ T9665] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 515.495031][ T9665] R13: 00007ff635c56218 R14: 00007ff635c56180 R15: 00007ffecea141f8 [ 515.495064][ T9665] [ 516.053784][ T9670] syzkaller0: entered promiscuous mode [ 516.053806][ T9670] syzkaller0: entered allmulticast mode [ 516.089587][ T9670] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 516.509178][ T9682] syzkaller0: entered promiscuous mode [ 516.509206][ T9682] syzkaller0: entered allmulticast mode [ 516.717368][ T9687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 516.717477][ T9687] block device autoloading is deprecated and will be removed. [ 517.412057][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 517.588538][ T5729] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 517.648019][ T5729] usb 1-1: USB disconnect, device number 33 [ 517.678753][ T5729] usblp0: removed [ 517.759223][ T9707] netlink: 'syz.6.925': attribute type 2 has an invalid length. [ 517.805899][ T9708] netlink: 'syz.0.927': attribute type 2 has an invalid length. [ 517.805916][ T9708] netlink: 228 bytes leftover after parsing attributes in process `syz.0.927'. [ 518.742024][ T9716] FAULT_INJECTION: forcing a failure. [ 518.742024][ T9716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.742063][ T9716] CPU: 1 UID: 0 PID: 9716 Comm: syz.6.929 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 518.742093][ T9716] Tainted: [Y]=FORCED_BIND [ 518.742100][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 518.742114][ T9716] Call Trace: [ 518.742122][ T9716] [ 518.742132][ T9716] dump_stack_lvl+0xe8/0x150 [ 518.742170][ T9716] should_fail_ex+0x46b/0x600 [ 518.742208][ T9716] _copy_from_iter+0x1d3/0x1660 [ 518.742258][ T9716] ? __pfx__copy_from_iter+0x10/0x10 [ 518.742286][ T9716] ? lock_acquire+0x115/0x350 [ 518.742330][ T9716] tun_get_user+0x265/0x4490 [ 518.742352][ T9716] ? is_bpf_text_address+0x292/0x2b0 [ 518.742386][ T9716] ? unwind_get_return_address+0x4d/0x90 [ 518.742414][ T9716] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.742451][ T9716] ? __lock_acquire+0x747/0x2de0 [ 518.742484][ T9716] ? __pfx_tun_get_user+0x10/0x10 [ 518.742509][ T9716] ? __lock_acquire+0x747/0x2de0 [ 518.742552][ T9716] ? kstrtoull+0x137/0x1d0 [ 518.742583][ T9716] ? ref_tracker_alloc+0x3b7/0x570 [ 518.742606][ T9716] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 518.742628][ T9716] ? lock_acquire+0x115/0x350 [ 518.742654][ T9716] ? tun_get+0x1c/0x2f0 [ 518.742680][ T9716] ? tun_get+0x1c/0x2f0 [ 518.742699][ T9716] ? tun_get+0x1c/0x2f0 [ 518.742724][ T9716] tun_chr_write_iter+0x119/0x200 [ 518.742748][ T9716] vfs_write+0x61e/0xbb0 [ 518.742804][ T9716] ? __pfx_vfs_write+0x10/0x10 [ 518.742839][ T9716] ? __fget_files+0x3a8/0x420 [ 518.742867][ T9716] ? __fget_files+0x2a/0x420 [ 518.742900][ T9716] ? fdget+0x1b2/0x250 [ 518.742936][ T9716] ksys_write+0x156/0x270 [ 518.742969][ T9716] ? __pfx_ksys_write+0x10/0x10 [ 518.743012][ T9716] do_syscall_64+0x166/0x520 [ 518.743033][ T9716] ? trace_irq_disable+0x3b/0x140 [ 518.743064][ T9716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.743086][ T9716] ? clear_bhb_loop+0x70/0xc0 [ 518.743113][ T9716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.743135][ T9716] RIP: 0033:0x7f1e4fdcf559 [ 518.743154][ T9716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.743173][ T9716] RSP: 002b:00007f1e4e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.743196][ T9716] RAX: ffffffffffffffda RBX: 00007f1e50055fa0 RCX: 00007f1e4fdcf559 [ 518.743212][ T9716] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000003 [ 518.743232][ T9716] RBP: 00007f1e4e01e090 R08: 0000000000000000 R09: 0000000000000000 [ 518.743246][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.743260][ T9716] R13: 00007f1e50056038 R14: 00007f1e50055fa0 R15: 00007fffef020a38 [ 518.743294][ T9716] [ 518.847124][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 520.637119][ T1002] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 520.788974][ T1002] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 520.791147][ T1002] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.791206][ T1002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.821143][ T1002] usb 7-1: config 0 descriptor?? [ 520.947097][ T30] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 521.060979][ T1002] ath6kl: Failed to submit usb control message: -71 [ 521.061029][ T1002] ath6kl: unable to send the bmi data to the device: -71 [ 521.061044][ T1002] ath6kl: Unable to send get target info: -71 [ 521.067246][ T1002] ath6kl: Failed to init ath6kl core: -71 [ 521.076578][ T1002] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 521.175453][ T30] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 521.200787][ T1002] usb 7-1: USB disconnect, device number 17 [ 521.225209][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.225237][ T30] usb 8-1: Product: syz [ 521.225252][ T30] usb 8-1: Manufacturer: syz [ 521.225268][ T30] usb 8-1: SerialNumber: syz [ 521.532407][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 521.718489][ T5621] Bluetooth: hci5: command 0x0405 tx timeout [ 522.988111][ T9783] FAULT_INJECTION: forcing a failure. [ 522.988111][ T9783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.988152][ T9783] CPU: 0 UID: 0 PID: 9783 Comm: syz.1.945 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 522.988184][ T9783] Tainted: [Y]=FORCED_BIND [ 522.988193][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 522.988207][ T9783] Call Trace: [ 522.988216][ T9783] [ 522.988227][ T9783] dump_stack_lvl+0xe8/0x150 [ 522.988268][ T9783] should_fail_ex+0x46b/0x600 [ 522.988310][ T9783] _copy_to_user+0x31/0xb0 [ 522.988348][ T9783] simple_read_from_buffer+0xe1/0x170 [ 522.988386][ T9783] proc_fail_nth_read+0x1be/0x230 [ 522.988418][ T9783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.988445][ T9783] ? rw_verify_area+0x250/0x4d0 [ 522.988481][ T9783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.988504][ T9783] vfs_read+0x219/0xa90 [ 522.988545][ T9783] ? __pfx_vfs_read+0x10/0x10 [ 522.988580][ T9783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 522.988607][ T9783] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 522.988631][ T9783] ? mutex_lock_nested+0x14d/0x1d0 [ 522.988659][ T9783] ? fdget_pos+0x11e/0x160 [ 522.988716][ T9783] ksys_read+0x156/0x270 [ 522.988754][ T9783] ? __pfx_ksys_read+0x10/0x10 [ 522.988798][ T9783] do_syscall_64+0x166/0x520 [ 522.988821][ T9783] ? trace_irq_disable+0x3b/0x140 [ 522.988852][ T9783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.988872][ T9783] ? clear_bhb_loop+0x70/0xc0 [ 522.988896][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.988915][ T9783] RIP: 0033:0x7f8f9d04fd8e [ 522.988933][ T9783] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 522.988952][ T9783] RSP: 002b:00007f8f9b2bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.988982][ T9783] RAX: ffffffffffffffda RBX: 00007f8f9b2bd6c0 RCX: 00007f8f9d04fd8e [ 522.988998][ T9783] RDX: 000000000000000f RSI: 00007f8f9b2bd0a0 RDI: 0000000000000003 [ 522.989013][ T9783] RBP: 00007f8f9b2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 522.989027][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.989039][ T9783] R13: 00007f8f9d316128 R14: 00007f8f9d316090 R15: 00007ffcb5dbdeb8 [ 522.989072][ T9783] [ 523.287730][ T9558] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 523.418997][ T8201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.447077][ T9558] usb 9-1: Using ep0 maxpacket: 8 [ 523.467310][ T9558] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 523.476808][ T9558] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 523.476836][ T9558] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 523.476857][ T9558] usb 9-1: config 0 has no interface number 0 [ 523.476902][ T9558] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.476929][ T9558] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 523.476956][ T9558] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 523.548008][ T9558] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 523.548048][ T9558] usb 9-1: Product: syz [ 523.555479][ T9558] usb 9-1: config 0 descriptor?? [ 523.801669][ T9558] usb 9-1: USB disconnect, device number 10 [ 523.847162][ T5713] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 524.007169][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 524.010787][ T5713] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 524.062168][ T5713] usb 1-1: config 0 has an invalid interface number: 97 but max is 0 [ 524.062204][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.062219][ T5713] usb 1-1: config 0 has no interface number 0 [ 524.097725][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.097755][ T5713] usb 1-1: Product: syz [ 524.097772][ T5713] usb 1-1: Manufacturer: syz [ 524.097788][ T5713] usb 1-1: SerialNumber: syz [ 524.105995][ T5713] usb 1-1: config 0 descriptor?? [ 524.217090][ T30] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 524.245904][ T30] usb 8-1: USB disconnect, device number 5 [ 524.266413][ T30] usblp0: removed [ 524.385421][ T5713] usb 1-1: USB disconnect, device number 34 [ 524.622668][ T9804] FAULT_INJECTION: forcing a failure. [ 524.622668][ T9804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.622708][ T9804] CPU: 1 UID: 0 PID: 9804 Comm: syz.1.953 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 524.622739][ T9804] Tainted: [Y]=FORCED_BIND [ 524.622747][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 524.622761][ T9804] Call Trace: [ 524.622770][ T9804] [ 524.622779][ T9804] dump_stack_lvl+0xe8/0x150 [ 524.622818][ T9804] should_fail_ex+0x46b/0x600 [ 524.622859][ T9804] _copy_from_user+0x2d/0xb0 [ 524.622895][ T9804] __sys_bpf+0x2e7/0xd90 [ 524.622928][ T9804] ? __pfx___sys_bpf+0x10/0x10 [ 524.622967][ T9804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.622997][ T9804] ? rt_mutex_slowunlock+0x219/0x460 [ 524.623046][ T9804] ? ksys_write+0x248/0x270 [ 524.623079][ T9804] ? __pfx_ksys_write+0x10/0x10 [ 524.623117][ T9804] __x64_sys_bpf+0xba/0xd0 [ 524.623152][ T9804] do_syscall_64+0x166/0x520 [ 524.623172][ T9804] ? trace_irq_disable+0x3b/0x140 [ 524.623204][ T9804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.623232][ T9804] ? clear_bhb_loop+0x70/0xc0 [ 524.623259][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.623280][ T9804] RIP: 0033:0x7f8f9d08f559 [ 524.623299][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.623318][ T9804] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.623342][ T9804] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 524.623357][ T9804] RDX: 000000000000000c RSI: 0000200000002b80 RDI: 000000000000000a [ 524.623371][ T9804] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 524.623385][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.623398][ T9804] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 524.623441][ T9804] [ 524.961404][ T9809] FAULT_INJECTION: forcing a failure. [ 524.961404][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.961432][ T9809] CPU: 0 UID: 0 PID: 9809 Comm: syz.8.954 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 524.961453][ T9809] Tainted: [Y]=FORCED_BIND [ 524.961459][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 524.961469][ T9809] Call Trace: [ 524.961474][ T9809] [ 524.961481][ T9809] dump_stack_lvl+0xe8/0x150 [ 524.961509][ T9809] should_fail_ex+0x46b/0x600 [ 524.961536][ T9809] _copy_from_user+0x2d/0xb0 [ 524.961561][ T9809] __sys_bpf+0x2e7/0xd90 [ 524.961583][ T9809] ? __pfx___sys_bpf+0x10/0x10 [ 524.961600][ T9809] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 524.961619][ T9809] ? rt_mutex_slowunlock+0x219/0x460 [ 524.961674][ T9809] ? ksys_write+0x248/0x270 [ 524.961715][ T9809] ? __pfx_ksys_write+0x10/0x10 [ 524.961752][ T9809] __x64_sys_bpf+0xba/0xd0 [ 524.961788][ T9809] do_syscall_64+0x166/0x520 [ 524.961803][ T9809] ? trace_irq_disable+0x3b/0x140 [ 524.961826][ T9809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.961841][ T9809] ? clear_bhb_loop+0x70/0xc0 [ 524.961859][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.961874][ T9809] RIP: 0033:0x7ff6359cf559 [ 524.961888][ T9809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.961901][ T9809] RSP: 002b:00007ff633c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.961917][ T9809] RAX: ffffffffffffffda RBX: 00007ff635c55fa0 RCX: 00007ff6359cf559 [ 524.961940][ T9809] RDX: 0000000000000050 RSI: 00002000000025c0 RDI: 000000000000000a [ 524.961949][ T9809] RBP: 00007ff633c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 524.961958][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.961966][ T9809] R13: 00007ff635c56038 R14: 00007ff635c55fa0 R15: 00007ffecea141f8 [ 524.961988][ T9809] [ 525.187784][ T9558] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 525.348145][ T9558] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=f6.8f [ 525.354328][ T9558] usb 8-1: config 0 has an invalid interface number: 73 but max is 0 [ 525.354356][ T9558] usb 8-1: config 0 has an invalid interface number: 212 but max is 0 [ 525.354376][ T9558] usb 8-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 525.354395][ T9558] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 525.354416][ T9558] usb 8-1: config 0 has no interface number 0 [ 525.354431][ T9558] usb 8-1: config 0 has no interface number 1 [ 525.354483][ T9558] usb 8-1: config 0 interface 73 altsetting 9 endpoint 0xB is Bulk; changing to Interrupt [ 525.354595][ T9558] usb 8-1: config 0 interface 73 altsetting 9 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 525.354621][ T9558] usb 8-1: config 0 interface 73 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 8 [ 525.354646][ T9558] usb 8-1: config 0 interface 73 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 525.354672][ T9558] usb 8-1: too many endpoints for config 0 interface 212 altsetting 148: 199, using maximum allowed: 30 [ 525.354717][ T9558] usb 8-1: config 0 interface 212 altsetting 148 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 525.354744][ T9558] usb 8-1: config 0 interface 212 altsetting 148 endpoint 0x5 has invalid maxpacket 1023, setting to 8 [ 525.354769][ T9558] usb 8-1: config 0 interface 212 altsetting 148 has 2 endpoint descriptors, different from the interface descriptor's value: 199 [ 525.354795][ T9558] usb 8-1: config 0 interface 73 has no altsetting 0 [ 525.354813][ T9558] usb 8-1: config 0 interface 212 has no altsetting 0 [ 525.367800][ T9558] usb 8-1: string descriptor 0 read error: -22 [ 525.368179][ T9558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.383016][ T8201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.554701][ T9558] usb 8-1: config 0 descriptor?? [ 525.615182][ T9802] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 526.289232][ T9821] loop5: detected capacity change from 0 to 3511 [ 526.560655][ T9828] FAULT_INJECTION: forcing a failure. [ 526.560655][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.560688][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.1.960 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 526.560714][ T9828] Tainted: [Y]=FORCED_BIND [ 526.560721][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 526.560734][ T9828] Call Trace: [ 526.560742][ T9828] [ 526.560749][ T9828] dump_stack_lvl+0xe8/0x150 [ 526.560781][ T9828] should_fail_ex+0x46b/0x600 [ 526.560814][ T9828] _copy_from_user+0x2d/0xb0 [ 526.560843][ T9828] ___sys_recvmsg+0x173/0x5a0 [ 526.560866][ T9828] ? __pfx____sys_recvmsg+0x10/0x10 [ 526.560886][ T9828] ? lock_acquire+0x115/0x350 [ 526.560917][ T9828] ? __fget_files+0x2a/0x420 [ 526.560939][ T9828] ? __fget_files+0x3a8/0x420 [ 526.560958][ T9828] ? __fget_files+0x2a/0x420 [ 526.560985][ T9828] __x64_sys_recvmsg+0x1b4/0x290 [ 526.561004][ T9828] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 526.561048][ T9828] do_syscall_64+0x166/0x520 [ 526.561064][ T9828] ? trace_irq_disable+0x3b/0x140 [ 526.561089][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.561106][ T9828] ? clear_bhb_loop+0x70/0xc0 [ 526.561132][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.561150][ T9828] RIP: 0033:0x7f8f9d08f559 [ 526.561165][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.561177][ T9828] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 526.561194][ T9828] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 526.561205][ T9828] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 526.561215][ T9828] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 526.561224][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.561234][ T9828] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 526.561258][ T9828] [ 527.021699][ T8201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.215335][ T9560] Buffer I/O error on dev loop5, logical block 438, async page read [ 527.364240][ T9798] orangefs_mount: mount request failed with -4 [ 527.531509][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.531673][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.531828][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533051][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533237][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533398][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533565][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533723][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.533881][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.534150][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.534327][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.534508][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.537368][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.537571][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.563014][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.563173][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.563327][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.563489][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.563642][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.574583][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.574861][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.575040][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.575208][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.575394][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591052][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591252][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591416][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591610][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591784][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.591957][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.592129][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.592299][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.592540][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.592697][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.594841][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.595029][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.595203][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.595426][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.605803][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.605974][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.606136][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.606296][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.606464][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.606705][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.606871][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.607314][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.607484][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.607645][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.607806][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.610907][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611075][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611307][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611484][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611663][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611827][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.611989][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.612165][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.612333][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.612498][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.622475][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.622637][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.622789][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.622944][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.623096][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 527.623249][ T5621] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 528.159029][ T9558] qmi_wwan 8-1:0.73: probe with driver qmi_wwan failed with error -22 [ 528.184991][ T9558] usb 8-1: USB disconnect, device number 6 [ 528.322614][ T9849] FAULT_INJECTION: forcing a failure. [ 528.322614][ T9849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.322653][ T9849] CPU: 0 UID: 0 PID: 9849 Comm: syz.7.965 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 528.322683][ T9849] Tainted: [Y]=FORCED_BIND [ 528.322691][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.322705][ T9849] Call Trace: [ 528.322713][ T9849] [ 528.322722][ T9849] dump_stack_lvl+0xe8/0x150 [ 528.322760][ T9849] should_fail_ex+0x46b/0x600 [ 528.322796][ T9849] _copy_from_user+0x2d/0xb0 [ 528.322827][ T9849] ___sys_sendmsg+0x1c6/0x360 [ 528.322847][ T9849] ? __lock_acquire+0x747/0x2de0 [ 528.322888][ T9849] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.322946][ T9849] ? __fget_files+0x3a8/0x420 [ 528.322973][ T9849] ? __fget_files+0x2a/0x420 [ 528.323012][ T9849] __x64_sys_sendmsg+0x1b7/0x290 [ 528.323038][ T9849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.323083][ T9849] do_syscall_64+0x166/0x520 [ 528.323103][ T9849] ? trace_irq_disable+0x3b/0x140 [ 528.323136][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.323158][ T9849] ? clear_bhb_loop+0x70/0xc0 [ 528.323185][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.323206][ T9849] RIP: 0033:0x7fd6a10ff559 [ 528.323226][ T9849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.323245][ T9849] RSP: 002b:00007fd69f356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.323268][ T9849] RAX: ffffffffffffffda RBX: 00007fd6a1385fa0 RCX: 00007fd6a10ff559 [ 528.323284][ T9849] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000006 [ 528.323299][ T9849] RBP: 00007fd69f356090 R08: 0000000000000000 R09: 0000000000000000 [ 528.323312][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.323326][ T9849] R13: 00007fd6a1386038 R14: 00007fd6a1385fa0 R15: 00007fff011fe398 [ 528.323359][ T9849] [ 528.834938][ T8201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.909365][ T9855] tap0: tun_chr_ioctl cmd 1074025677 [ 528.910701][ T9855] tap0: linktype set to 1293 [ 529.146221][ T9858] input: syz1 as /devices/virtual/input/input10 [ 529.321065][ T9861] FAULT_INJECTION: forcing a failure. [ 529.321065][ T9861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.321118][ T9861] CPU: 0 UID: 0 PID: 9861 Comm: syz.7.968 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 529.321146][ T9861] Tainted: [Y]=FORCED_BIND [ 529.321154][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 529.321168][ T9861] Call Trace: [ 529.321176][ T9861] [ 529.321185][ T9861] dump_stack_lvl+0xe8/0x150 [ 529.321223][ T9861] should_fail_ex+0x46b/0x600 [ 529.321265][ T9861] _copy_from_user+0x2d/0xb0 [ 529.321300][ T9861] input_event_from_user+0xb1/0x290 [ 529.321329][ T9861] ? __pfx_input_event_from_user+0x10/0x10 [ 529.321367][ T9861] uinput_write+0x284/0xfe0 [ 529.321407][ T9861] ? __pfx_uinput_write+0x10/0x10 [ 529.321438][ T9861] ? bpf_lsm_file_permission+0x9/0x20 [ 529.321465][ T9861] ? security_file_permission+0x75/0x260 [ 529.321491][ T9861] ? rw_verify_area+0x209/0x4d0 [ 529.321535][ T9861] ? __pfx_uinput_write+0x10/0x10 [ 529.321556][ T9861] vfs_write+0x29f/0xbb0 [ 529.321584][ T9861] ? __pfx_vfs_write+0x10/0x10 [ 529.321608][ T9861] ? __fget_files+0x2a/0x420 [ 529.321627][ T9861] ? __fget_files+0x3a8/0x420 [ 529.321647][ T9861] ? __fget_files+0x2a/0x420 [ 529.321670][ T9861] ? fdget+0x1b2/0x250 [ 529.321696][ T9861] ksys_write+0x156/0x270 [ 529.321720][ T9861] ? __pfx_ksys_write+0x10/0x10 [ 529.321756][ T9861] do_syscall_64+0x166/0x520 [ 529.321771][ T9861] ? trace_irq_disable+0x3b/0x140 [ 529.321794][ T9861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.321810][ T9861] ? clear_bhb_loop+0x70/0xc0 [ 529.321828][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.321843][ T9861] RIP: 0033:0x7fd6a10ff559 [ 529.321857][ T9861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.321870][ T9861] RSP: 002b:00007fd69f335028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.321887][ T9861] RAX: ffffffffffffffda RBX: 00007fd6a1386090 RCX: 00007fd6a10ff559 [ 529.321898][ T9861] RDX: 000000000000fe4f RSI: 0000200000001940 RDI: 0000000000000003 [ 529.321908][ T9861] RBP: 00007fd69f335090 R08: 0000000000000000 R09: 0000000000000000 [ 529.321917][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.321926][ T9861] R13: 00007fd6a1386128 R14: 00007fd6a1386090 R15: 00007fff011fe398 [ 529.321950][ T9861] [ 530.009445][ T9871] FAULT_INJECTION: forcing a failure. [ 530.009445][ T9871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.009481][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.1.973 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 530.009507][ T9871] Tainted: [Y]=FORCED_BIND [ 530.009514][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.009526][ T9871] Call Trace: [ 530.009533][ T9871] [ 530.009541][ T9871] dump_stack_lvl+0xe8/0x150 [ 530.009578][ T9871] should_fail_ex+0x46b/0x600 [ 530.009611][ T9871] _copy_from_user+0x2d/0xb0 [ 530.009638][ T9871] __sys_bpf+0x2e7/0xd90 [ 530.009664][ T9871] ? __pfx___sys_bpf+0x10/0x10 [ 530.009684][ T9871] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 530.009707][ T9871] ? rt_mutex_slowunlock+0x219/0x460 [ 530.009755][ T9871] ? ksys_write+0x248/0x270 [ 530.009785][ T9871] ? __pfx_ksys_write+0x10/0x10 [ 530.009819][ T9871] __x64_sys_bpf+0xba/0xd0 [ 530.009851][ T9871] do_syscall_64+0x166/0x520 [ 530.009870][ T9871] ? trace_irq_disable+0x3b/0x140 [ 530.009898][ T9871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.009917][ T9871] ? clear_bhb_loop+0x70/0xc0 [ 530.009942][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.009962][ T9871] RIP: 0033:0x7f8f9d08f559 [ 530.009981][ T9871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.010000][ T9871] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.010021][ T9871] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 530.010035][ T9871] RDX: 0000000000000015 RSI: 0000200000000bc0 RDI: 000000000000000a [ 530.010048][ T9871] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 530.010060][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.010072][ T9871] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 530.010103][ T9871] [ 530.461773][ T9877] FAULT_INJECTION: forcing a failure. [ 530.461773][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.461811][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.7.976 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 530.461840][ T9877] Tainted: [Y]=FORCED_BIND [ 530.461848][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.461860][ T9877] Call Trace: [ 530.461868][ T9877] [ 530.461878][ T9877] dump_stack_lvl+0xe8/0x150 [ 530.461915][ T9877] should_fail_ex+0x46b/0x600 [ 530.461952][ T9877] _copy_from_user+0x2d/0xb0 [ 530.461985][ T9877] ___sys_sendmsg+0x1c6/0x360 [ 530.462005][ T9877] ? __lock_acquire+0x747/0x2de0 [ 530.462039][ T9877] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.462098][ T9877] ? __fget_files+0x3a8/0x420 [ 530.462130][ T9877] ? __fget_files+0x2a/0x420 [ 530.462168][ T9877] __x64_sys_sendmsg+0x1b7/0x290 [ 530.462193][ T9877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.462236][ T9877] do_syscall_64+0x166/0x520 [ 530.462256][ T9877] ? trace_irq_disable+0x3b/0x140 [ 530.462288][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.462310][ T9877] ? clear_bhb_loop+0x70/0xc0 [ 530.462337][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.462357][ T9877] RIP: 0033:0x7fd6a10ff559 [ 530.462376][ T9877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.462394][ T9877] RSP: 002b:00007fd69f356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.462417][ T9877] RAX: ffffffffffffffda RBX: 00007fd6a1385fa0 RCX: 00007fd6a10ff559 [ 530.462433][ T9877] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 530.462446][ T9877] RBP: 00007fd69f356090 R08: 0000000000000000 R09: 0000000000000000 [ 530.462460][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.462473][ T9877] R13: 00007fd6a1386038 R14: 00007fd6a1385fa0 R15: 00007fff011fe398 [ 530.462503][ T9877] [ 530.834897][ T9882] FAULT_INJECTION: forcing a failure. [ 530.834897][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 530.834941][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.6.977 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 530.834978][ T9882] Tainted: [Y]=FORCED_BIND [ 530.834988][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.835003][ T9882] Call Trace: [ 530.835011][ T9882] [ 530.835022][ T9882] dump_stack_lvl+0xe8/0x150 [ 530.835062][ T9882] should_fail_ex+0x46b/0x600 [ 530.835102][ T9882] should_failslab+0xa8/0x100 [ 530.835145][ T9882] __kvmalloc_node_noprof+0x171/0x880 [ 530.835175][ T9882] ? bpf_compute_scc+0xd2/0xb10 [ 530.835210][ T9882] ? bpf_compute_scc+0xd2/0xb10 [ 530.835244][ T9882] bpf_compute_scc+0xd2/0xb10 [ 530.835291][ T9882] bpf_check+0x2727/0x2ef0 [ 530.835336][ T9882] ? __pfx_bpf_check+0x10/0x10 [ 530.835370][ T9882] ? bpf_obj_name_cpy+0x194/0x1e0 [ 530.835404][ T9882] bpf_prog_load+0x14d1/0x1c20 [ 530.835438][ T9882] ? __pfx_bpf_prog_load+0x10/0x10 [ 530.835488][ T9882] __sys_bpf+0xd0d/0xd90 [ 530.835523][ T9882] ? __pfx___sys_bpf+0x10/0x10 [ 530.835556][ T9882] ? do_futex+0x3e7/0x4e0 [ 530.835610][ T9882] ? rcu_is_watching+0x16/0xb0 [ 530.835644][ T9882] __x64_sys_bpf+0xba/0xd0 [ 530.835680][ T9882] do_syscall_64+0x166/0x520 [ 530.835723][ T9882] ? trace_irq_disable+0x3b/0x140 [ 530.835760][ T9882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.835790][ T9882] ? clear_bhb_loop+0x70/0xc0 [ 530.835815][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.835836][ T9882] RIP: 0033:0x7f1e4fdcf559 [ 530.835856][ T9882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.835880][ T9882] RSP: 002b:00007f1e4e01e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.835909][ T9882] RAX: ffffffffffffffda RBX: 00007f1e50055fa0 RCX: 00007f1e4fdcf559 [ 530.835930][ T9882] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 530.835948][ T9882] RBP: 00007f1e4fe66b20 R08: 0000000000000000 R09: 0000000000000000 [ 530.835965][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.835978][ T9882] R13: 00007f1e50056038 R14: 00007f1e50055fa0 R15: 00007fffef020a38 [ 530.836011][ T9882] [ 531.345698][ T9890] jffs2: notice: (9890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 531.431656][ T9894] openvswitch: netlink: Missing key (keys=d0, expected=40300) [ 531.449025][ T8201] bridge_slave_1: left allmulticast mode [ 531.449074][ T8201] bridge_slave_1: left promiscuous mode [ 531.449347][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.613497][ T8201] bridge_slave_0: left allmulticast mode [ 531.613534][ T8201] bridge_slave_0: left promiscuous mode [ 531.613797][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.046482][ T9910] 9p: Bad value for 'wfdno' [ 532.429660][ T3241] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 532.598384][ T3241] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 532.604210][ T9920] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 532.605658][ T3241] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.608406][ T3241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.608429][ T3241] usb 2-1: Product: syz [ 532.608443][ T3241] usb 2-1: Manufacturer: syz [ 532.608471][ T3241] usb 2-1: SerialNumber: syz [ 532.952538][ T9916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.667587][ T8201] bridge0 (unregistering): left allmulticast mode [ 533.927947][ T8201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.998337][ T8201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.020071][ T8201] bond0 (unregistering): Released all slaves [ 534.061507][ T9910] tipc: Started in network mode [ 534.061528][ T9910] tipc: Node identity 4, cluster identity 4711 [ 534.061559][ T9910] tipc: Node number set to 4 [ 534.720050][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 534.877201][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 534.881523][ T9] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 534.903615][ T9] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 534.903641][ T9] usb 9-1: config 0 has no interface number 0 [ 534.903730][ T9] usb 9-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.903746][ T9] usb 9-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 534.903781][ T9] usb 9-1: config 0 interface 184 has no altsetting 0 [ 534.953900][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.953928][ T9] usb 9-1: Product: syz [ 534.953999][ T9] usb 9-1: Manufacturer: syz [ 534.954015][ T9] usb 9-1: SerialNumber: syz [ 534.984778][ T9] usb 9-1: config 0 descriptor?? [ 535.058086][ T9] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 535.059178][ T9] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 535.132645][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 535.133374][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 535.168948][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 535.168983][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.984'. [ 535.234223][ T3241] usb 2-1: selecting invalid altsetting 1 [ 535.234268][ T3241] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 535.234354][ T3241] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -22! [ 535.234415][ T3241] speedtch 2-1:1.0: probe with driver speedtch failed with error -22 [ 535.289255][ T3241] usb 2-1: selecting invalid altsetting 1 [ 535.289280][ T3241] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 535.297597][ T3241] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -22! [ 535.297763][ T3241] speedtch 2-1:1.1: probe with driver speedtch failed with error -22 [ 535.370371][ T3241] usb 2-1: USB disconnect, device number 53 [ 535.615704][ T9946] FAULT_INJECTION: forcing a failure. [ 535.615704][ T9946] name failslab, interval 1, probability 0, space 0, times 0 [ 535.615740][ T9946] CPU: 1 UID: 0 PID: 9946 Comm: syz.0.993 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 535.615778][ T9946] Tainted: [Y]=FORCED_BIND [ 535.615785][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.615797][ T9946] Call Trace: [ 535.615805][ T9946] [ 535.615814][ T9946] dump_stack_lvl+0xe8/0x150 [ 535.615850][ T9946] should_fail_ex+0x46b/0x600 [ 535.615886][ T9946] should_failslab+0xa8/0x100 [ 535.615912][ T9946] __kmalloc_noprof+0xf6/0x790 [ 535.615932][ T9946] ? tomoyo_realpath_from_path+0xef/0x640 [ 535.615958][ T9946] ? tomoyo_realpath_from_path+0xef/0x640 [ 535.615992][ T9946] tomoyo_realpath_from_path+0xef/0x640 [ 535.616030][ T9946] ? tomoyo_path_number_perm+0x219/0x5f0 [ 535.616058][ T9946] tomoyo_path_number_perm+0x246/0x5f0 [ 535.616083][ T9946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.616103][ T9946] ? __lock_acquire+0x747/0x2de0 [ 535.616144][ T9946] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 535.616182][ T9946] ? __fget_files+0x2a/0x420 [ 535.616215][ T9946] ? __fget_files+0x2a/0x420 [ 535.616240][ T9946] ? __fget_files+0x2a/0x420 [ 535.616270][ T9946] security_file_ioctl+0xc3/0x2a0 [ 535.616293][ T9946] __se_sys_ioctl+0x47/0x170 [ 535.616314][ T9946] do_syscall_64+0x166/0x520 [ 535.616331][ T9946] ? trace_irq_disable+0x3b/0x140 [ 535.616357][ T9946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.616375][ T9946] ? clear_bhb_loop+0x70/0xc0 [ 535.616397][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.616414][ T9946] RIP: 0033:0x7f21b29cf559 [ 535.616433][ T9946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.616449][ T9946] RSP: 002b:00007f21b0c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.616469][ T9946] RAX: ffffffffffffffda RBX: 00007f21b2c55fa0 RCX: 00007f21b29cf559 [ 535.616483][ T9946] RDX: 0000200000005dc0 RSI: 0000000040505331 RDI: 0000000000000003 [ 535.616495][ T9946] RBP: 00007f21b0c26090 R08: 0000000000000000 R09: 0000000000000000 [ 535.616507][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.616518][ T9946] R13: 00007f21b2c56038 R14: 00007f21b2c55fa0 R15: 00007ffe6cb12388 [ 535.616551][ T9946] [ 535.616636][ T9946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.077125][ T3241] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 536.077347][ T9558] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 536.258150][ T9558] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 536.260091][ T9558] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 536.260116][ T9558] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 536.260137][ T9558] usb 8-1: config 0 has no interface number 0 [ 536.261771][ T3241] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 536.263471][ T9558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.263496][ T9558] usb 8-1: Product: syz [ 536.263511][ T9558] usb 8-1: Manufacturer: syz [ 536.263527][ T9558] usb 8-1: SerialNumber: syz [ 536.266748][ T3241] usb 2-1: config index 0 descriptor too short (expected 59277, got 27) [ 536.266798][ T3241] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 536.266825][ T3241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 536.266852][ T3241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 536.266892][ T3241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.391630][ T3241] usb 2-1: config 0 descriptor?? [ 536.392486][ T9937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.408953][ T9558] usb 8-1: config 0 descriptor?? [ 536.704493][ T9558] uvcvideo 8-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 536.704527][ T9558] uvcvideo 8-1:0.64: No valid video chain found. [ 536.760764][ T9558] usb 8-1: USB disconnect, device number 7 [ 536.946246][ T9969] FAULT_INJECTION: forcing a failure. [ 536.946246][ T9969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.946288][ T9969] CPU: 1 UID: 0 PID: 9969 Comm: syz.0.999 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 536.946321][ T9969] Tainted: [Y]=FORCED_BIND [ 536.946329][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 536.946343][ T9969] Call Trace: [ 536.946352][ T9969] [ 536.946362][ T9969] dump_stack_lvl+0xe8/0x150 [ 536.946400][ T9969] should_fail_ex+0x46b/0x600 [ 536.946442][ T9969] _copy_from_user+0x2d/0xb0 [ 536.946479][ T9969] ___sys_sendmsg+0x1c6/0x360 [ 536.946504][ T9969] ? __lock_acquire+0x747/0x2de0 [ 536.946542][ T9969] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.946611][ T9969] ? __fget_files+0x3a8/0x420 [ 536.946643][ T9969] ? __fget_files+0x2a/0x420 [ 536.946685][ T9969] __x64_sys_sendmsg+0x1b7/0x290 [ 536.946713][ T9969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.946761][ T9969] do_syscall_64+0x166/0x520 [ 536.946784][ T9969] ? trace_irq_disable+0x3b/0x140 [ 536.946822][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.946847][ T9969] ? clear_bhb_loop+0x70/0xc0 [ 536.946877][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.946901][ T9969] RIP: 0033:0x7f21b29cf559 [ 536.946923][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.946944][ T9969] RSP: 002b:00007f21b0c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.946970][ T9969] RAX: ffffffffffffffda RBX: 00007f21b2c55fa0 RCX: 00007f21b29cf559 [ 536.946989][ T9969] RDX: 0000000020008004 RSI: 00002000000003c0 RDI: 0000000000000004 [ 536.947005][ T9969] RBP: 00007f21b0c26090 R08: 0000000000000000 R09: 0000000000000000 [ 536.947021][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.947035][ T9969] R13: 00007f21b2c56038 R14: 00007f21b2c55fa0 R15: 00007ffe6cb12388 [ 536.947072][ T9969] [ 537.428681][ T30] usb 9-1: USB disconnect, device number 11 [ 537.506178][ T3241] ath6kl: Failed to submit usb control message: -110 [ 537.506233][ T3241] ath6kl: unable to send the bmi data to the device: -110 [ 537.506251][ T3241] ath6kl: Unable to send get target info: -110 [ 537.511250][ T3241] ath6kl: Failed to init ath6kl core: -110 [ 537.512558][ T3241] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 537.699220][ T9976] FAULT_INJECTION: forcing a failure. [ 537.699220][ T9976] name failslab, interval 1, probability 0, space 0, times 0 [ 537.699261][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz.8.1001 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 537.699293][ T9976] Tainted: [Y]=FORCED_BIND [ 537.699302][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.699316][ T9976] Call Trace: [ 537.699325][ T9976] [ 537.699335][ T9976] dump_stack_lvl+0xe8/0x150 [ 537.699376][ T9976] should_fail_ex+0x46b/0x600 [ 537.699417][ T9976] should_failslab+0xa8/0x100 [ 537.699448][ T9976] __kmalloc_noprof+0xf6/0x790 [ 537.699471][ T9976] ? tomoyo_realpath_from_path+0xef/0x640 [ 537.699500][ T9976] ? tomoyo_realpath_from_path+0xef/0x640 [ 537.699539][ T9976] tomoyo_realpath_from_path+0xef/0x640 [ 537.699585][ T9976] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.699612][ T9976] tomoyo_path_number_perm+0x246/0x5f0 [ 537.699642][ T9976] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.699667][ T9976] ? __lock_acquire+0x747/0x2de0 [ 537.699714][ T9976] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 537.699760][ T9976] ? __fget_files+0x2a/0x420 [ 537.699795][ T9976] ? __fget_files+0x2a/0x420 [ 537.699826][ T9976] ? __fget_files+0x2a/0x420 [ 537.699863][ T9976] security_file_ioctl+0xc3/0x2a0 [ 537.699892][ T9976] __se_sys_ioctl+0x47/0x170 [ 537.699919][ T9976] do_syscall_64+0x166/0x520 [ 537.699941][ T9976] ? trace_irq_disable+0x3b/0x140 [ 537.699973][ T9976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.699996][ T9976] ? clear_bhb_loop+0x70/0xc0 [ 537.700024][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.700047][ T9976] RIP: 0033:0x7ff6359cf559 [ 537.700068][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.700088][ T9976] RSP: 002b:00007ff633c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.700113][ T9976] RAX: ffffffffffffffda RBX: 00007ff635c55fa0 RCX: 00007ff6359cf559 [ 537.700129][ T9976] RDX: 0000200000000480 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 537.700144][ T9976] RBP: 00007ff633c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 537.700158][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.700180][ T9976] R13: 00007ff635c56038 R14: 00007ff635c55fa0 R15: 00007ffecea141f8 [ 537.700217][ T9976] [ 537.705292][ T9976] ERROR: Out of memory at tomoyo_realpath_from_path. [ 537.705481][ T9976] device-mapper: dirty region log: invalid region size 7 [ 537.705509][ T9976] device-mapper: table: 248:4: mirror: Error creating mirror dirty log (-EINVAL) [ 537.705521][ T9976] device-mapper: ioctl: error adding target to table [ 538.626652][ T8201] hsr_slave_0: left promiscuous mode [ 538.659945][ T8201] hsr_slave_1: left promiscuous mode [ 538.663396][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.663422][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.745896][ T8201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.745934][ T8201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.825714][T10000] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 538.825743][T10000] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 538.951602][ T8201] veth1_macvtap: left promiscuous mode [ 538.951721][ T8201] veth0_macvtap: left promiscuous mode [ 538.952006][ T8201] veth1_vlan: left promiscuous mode [ 538.952200][ T8201] veth0_vlan: left promiscuous mode [ 539.015197][ T3241] usb 2-1: USB disconnect, device number 54 [ 539.169075][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 539.317100][ T9558] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 539.350554][ T10] usb 8-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 539.352512][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.352565][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.352609][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.408487][ T10] usb 8-1: config 0 descriptor?? [ 539.498416][ T9558] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 539.498479][ T9558] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 539.500563][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.500643][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.502205][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.502228][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.505999][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.506023][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.603968][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.604064][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.611491][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.613586][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.672728][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.672746][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.676824][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.676910][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.724349][ T9558] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.724376][ T9558] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.755672][ T9558] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 539.755693][ T9558] usb 1-1: Product: syz [ 539.755703][ T9558] usb 1-1: Manufacturer: syz [ 539.755714][ T9558] usb 1-1: SerialNumber: syz [ 539.817184][ T9558] usb 1-1: config 0 descriptor?? [ 539.863488][ T9558] yurex 1-1:0.0: Could not find endpoints [ 540.040378][ T10] hid_parser_main: 465 callbacks suppressed [ 540.040404][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.040434][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.040459][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.040485][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.040509][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.040534][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.044280][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.044312][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.044339][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.044364][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 540.050839][ T10] asus 0003:0B05:1ABE.0003: unexpected long global item [ 540.054247][ T10] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 540.054439][ T10] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 540.173915][ T36] audit: type=1326 audit(1792797006.990:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.173967][ T36] audit: type=1326 audit(1792797006.990:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.174235][ T36] audit: type=1326 audit(1792797006.990:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.174754][ T36] audit: type=1326 audit(1792797006.990:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.175150][ T36] audit: type=1326 audit(1792797006.990:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.175197][ T36] audit: type=1326 audit(1792797006.990:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.175594][ T36] audit: type=1326 audit(1792797006.990:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.175635][ T36] audit: type=1326 audit(1792797006.990:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.176003][ T36] audit: type=1326 audit(1792797006.990:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.176390][ T36] audit: type=1326 audit(1792797006.990:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.0.1008" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b29cf559 code=0x7ffc0000 [ 540.967125][ T9558] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 541.138652][ T9558] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 541.139640][ T9558] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.139678][ T9558] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 541.139699][ T9558] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 541.139729][ T9558] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.588059][ T8201] team0 (unregistering): Port device team_slave_1 removed [ 541.638074][ T8201] team0 (unregistering): Port device team_slave_0 removed [ 541.682731][ T9558] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 541.682749][ T9558] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 541.850134][ T9558] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 541.882281][ T9558] usb 9-1: USB disconnect, device number 12 [ 542.007611][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.008247][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.294002][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 542.319263][T10001] tipc: Enabling not permitted [ 542.319290][T10001] tipc: Enabling of bearer rejected, failed to enable media [ 542.471938][ T5899] usb 8-1: USB disconnect, device number 8 [ 542.674820][T10041] netlink: 'syz.1.1018': attribute type 2 has an invalid length. [ 542.674845][T10041] netlink: 'syz.1.1018': attribute type 2 has an invalid length. [ 542.835044][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.835616][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.887294][ T5713] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 543.042997][ T5713] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 543.045875][ T5713] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.045915][ T5713] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 543.045936][ T5713] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 543.045966][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.064192][ T5899] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 543.244025][ T5899] usb 7-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 543.269792][ T5899] usb 7-1: config 1 has an invalid interface number: 9 but max is 2 [ 543.271832][ T5899] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.271858][ T5899] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 543.271883][ T5899] usb 7-1: config 1 has no interface number 3 [ 543.272153][ T5899] usb 7-1: too many endpoints for config 1 interface 9 altsetting 5: 130, using maximum allowed: 30 [ 543.272198][ T5899] usb 7-1: config 1 interface 9 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 543.272232][ T5899] usb 7-1: config 1 interface 9 has no altsetting 0 [ 543.357389][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.357419][ T5899] usb 7-1: Product: syz [ 543.357826][ T5899] usb 7-1: Manufacturer: syz [ 543.357844][ T5899] usb 7-1: SerialNumber: syz [ 543.598811][T10046] fuse: Bad value for 'fd' [ 543.602320][T10045] netlink: 'syz.6.1019': attribute type 10 has an invalid length. [ 543.602337][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1019'. [ 543.680948][T10040] FAULT_INJECTION: forcing a failure. [ 543.680948][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 543.680995][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.8.1017 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 543.681025][T10040] Tainted: [Y]=FORCED_BIND [ 543.681033][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.681046][T10040] Call Trace: [ 543.681054][T10040] [ 543.681063][T10040] dump_stack_lvl+0xe8/0x150 [ 543.681101][T10040] should_fail_ex+0x46b/0x600 [ 543.681141][T10040] should_failslab+0xa8/0x100 [ 543.681168][T10040] __kmalloc_noprof+0xf6/0x790 [ 543.681190][T10040] ? tomoyo_realpath_from_path+0xef/0x640 [ 543.681219][T10040] ? tomoyo_realpath_from_path+0xef/0x640 [ 543.681257][T10040] tomoyo_realpath_from_path+0xef/0x640 [ 543.681296][T10040] ? tomoyo_path_number_perm+0x219/0x5f0 [ 543.681321][T10040] tomoyo_path_number_perm+0x246/0x5f0 [ 543.681350][T10040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.681373][T10040] ? __lock_acquire+0x747/0x2de0 [ 543.681419][T10040] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 543.681463][T10040] ? __fget_files+0x2a/0x420 [ 543.681495][T10040] ? __fget_files+0x2a/0x420 [ 543.681524][T10040] ? __fget_files+0x2a/0x420 [ 543.681560][T10040] security_file_ioctl+0xc3/0x2a0 [ 543.681588][T10040] __se_sys_ioctl+0x47/0x170 [ 543.681613][T10040] do_syscall_64+0x166/0x520 [ 543.681634][T10040] ? trace_irq_disable+0x3b/0x140 [ 543.681665][T10040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.681686][T10040] ? clear_bhb_loop+0x70/0xc0 [ 543.681714][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.681739][T10040] RIP: 0033:0x7ff6359cf559 [ 543.681765][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.681784][T10040] RSP: 002b:00007ff633c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.681825][T10040] RAX: ffffffffffffffda RBX: 00007ff635c55fa0 RCX: 00007ff6359cf559 [ 543.681842][T10040] RDX: 0000000000000000 RSI: 0000000040106183 RDI: 0000000000000004 [ 543.681875][T10040] RBP: 00007ff633c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 543.681890][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.681905][T10040] R13: 00007ff635c56038 R14: 00007ff635c55fa0 R15: 00007ffecea141f8 [ 543.681943][T10040] [ 543.686301][T10040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.750994][ T5713] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 543.751015][ T5713] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 543.991750][ T5713] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 544.025157][ T5899] usb 7-1: unit 4 not found! [ 544.035890][ T5713] usb 9-1: USB disconnect, device number 13 [ 544.154250][ T5899] hub 7-1:1.9: Invalid hub with more than one config or interface [ 544.154291][ T5899] hub 7-1:1.9: probe with driver hub failed with error -22 [ 544.179097][ T5899] usb 7-1: USB disconnect, device number 18 [ 544.392858][ T8201] IPVS: stop unused estimator thread 0... [ 544.484990][ T9560] udevd[9560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.549613][T10067] nvmet: adding nsid 1 to subsystem testsubsys [ 544.918613][ T5713] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 545.003139][T10076] FAULT_INJECTION: forcing a failure. [ 545.003139][T10076] name failslab, interval 1, probability 0, space 0, times 0 [ 545.003181][T10076] CPU: 0 UID: 0 PID: 10076 Comm: syz.1.1029 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 545.003213][T10076] Tainted: [Y]=FORCED_BIND [ 545.003226][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.003241][T10076] Call Trace: [ 545.003250][T10076] [ 545.003261][T10076] dump_stack_lvl+0xe8/0x150 [ 545.003302][T10076] should_fail_ex+0x46b/0x600 [ 545.003346][T10076] should_failslab+0xa8/0x100 [ 545.003375][T10076] __kmalloc_noprof+0xf6/0x790 [ 545.003400][T10076] ? tomoyo_realpath_from_path+0xef/0x640 [ 545.003431][T10076] ? tomoyo_realpath_from_path+0xef/0x640 [ 545.003471][T10076] tomoyo_realpath_from_path+0xef/0x640 [ 545.003524][T10076] ? tomoyo_path_number_perm+0x219/0x5f0 [ 545.003549][T10076] tomoyo_path_number_perm+0x246/0x5f0 [ 545.003578][T10076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 545.003601][T10076] ? __lock_acquire+0x747/0x2de0 [ 545.003648][T10076] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 545.003693][T10076] ? __fget_files+0x2a/0x420 [ 545.003725][T10076] ? __fget_files+0x2a/0x420 [ 545.003754][T10076] ? __fget_files+0x2a/0x420 [ 545.003788][T10076] security_file_ioctl+0xc3/0x2a0 [ 545.003817][T10076] __se_sys_ioctl+0x47/0x170 [ 545.003842][T10076] do_syscall_64+0x166/0x520 [ 545.003864][T10076] ? trace_irq_disable+0x3b/0x140 [ 545.003902][T10076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.003925][T10076] ? clear_bhb_loop+0x70/0xc0 [ 545.003953][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.003975][T10076] RIP: 0033:0x7f8f9d08f559 [ 545.003995][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.004015][T10076] RSP: 002b:00007f8f9b2de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.004039][T10076] RAX: ffffffffffffffda RBX: 00007f8f9d315fa0 RCX: 00007f8f9d08f559 [ 545.004055][T10076] RDX: 0000200000000380 RSI: 00000000000007ab RDI: 0000000000000003 [ 545.004070][T10076] RBP: 00007f8f9b2de090 R08: 0000000000000000 R09: 0000000000000000 [ 545.004084][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.004098][T10076] R13: 00007f8f9d316038 R14: 00007f8f9d315fa0 R15: 00007ffcb5dbdeb8 [ 545.004134][T10076] [ 545.014630][T10076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 545.067079][ T5713] usb 8-1: Using ep0 maxpacket: 16 [ 545.070278][ T5713] usb 8-1: unable to get BOS descriptor or descriptor too short [ 545.070351][ T5713] usb 8-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.40 [ 545.071895][ T5713] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 136, changing to 11 [ 545.071928][ T5713] usb 8-1: config 1 interface 0 has no altsetting 0 [ 545.102575][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.102604][ T5713] usb 8-1: Product: syz [ 545.102622][ T5713] usb 8-1: Manufacturer: syz [ 545.102639][ T5713] usb 8-1: SerialNumber: syz [ 545.823373][T10088] netlink: 'syz.8.1032': attribute type 2 has an invalid length. [ 545.823401][T10088] netlink: 'syz.8.1032': attribute type 2 has an invalid length. [ 545.823594][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.854581][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.985463][ T5713] usbhid 8-1:1.0: can't add hid device: -71 [ 545.985581][ T5713] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 546.010601][ T5713] usb 8-1: USB disconnect, device number 9 [ 546.169447][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 546.193082][T10095] FAULT_INJECTION: forcing a failure. [ 546.193082][T10095] name failslab, interval 1, probability 0, space 0, times 0 [ 546.193118][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.8.1033 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 546.193147][T10095] Tainted: [Y]=FORCED_BIND [ 546.193155][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.193169][T10095] Call Trace: [ 546.193177][T10095] [ 546.193187][T10095] dump_stack_lvl+0xe8/0x150 [ 546.193225][T10095] should_fail_ex+0x46b/0x600 [ 546.193273][T10095] should_failslab+0xa8/0x100 [ 546.193301][T10095] __kmalloc_noprof+0xf6/0x790 [ 546.193322][T10095] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.193356][T10095] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.193392][T10095] tomoyo_realpath_from_path+0xef/0x640 [ 546.193432][T10095] ? tomoyo_path_number_perm+0x219/0x5f0 [ 546.193458][T10095] tomoyo_path_number_perm+0x246/0x5f0 [ 546.193486][T10095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.193509][T10095] ? __lock_acquire+0x747/0x2de0 [ 546.193554][T10095] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.193595][T10095] ? __fget_files+0x2a/0x420 [ 546.193628][T10095] ? __fget_files+0x2a/0x420 [ 546.193658][T10095] ? __fget_files+0x2a/0x420 [ 546.193693][T10095] security_file_ioctl+0xc3/0x2a0 [ 546.193721][T10095] __se_sys_ioctl+0x47/0x170 [ 546.193746][T10095] do_syscall_64+0x166/0x520 [ 546.193767][T10095] ? trace_irq_disable+0x3b/0x140 [ 546.193798][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.193821][T10095] ? clear_bhb_loop+0x70/0xc0 [ 546.193848][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.193870][T10095] RIP: 0033:0x7ff6359cf559 [ 546.193890][T10095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.193908][T10095] RSP: 002b:00007ff633bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.193932][T10095] RAX: ffffffffffffffda RBX: 00007ff635c56090 RCX: 00007ff6359cf559 [ 546.193948][T10095] RDX: 0000200000000440 RSI: 0000000040045612 RDI: 0000000000000003 [ 546.193963][T10095] RBP: 00007ff633bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 546.193978][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.193991][T10095] R13: 00007ff635c56128 R14: 00007ff635c56090 R15: 00007ffecea141f8 [ 546.194027][T10095] [ 546.370954][T10095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.369280][T10102] loop5: detected capacity change from 0 to 4095 [ 547.657179][ T9558] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 548.656944][ T9558] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 548.675301][ T9558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.675347][ T9558] usb 8-1: Product: syz [ 548.675364][ T9558] usb 8-1: Manufacturer: syz [ 548.675381][ T9558] usb 8-1: SerialNumber: syz [ 548.707925][ T9558] usb 8-1: config 0 descriptor?? [ 548.759925][ T9558] gspca_main: spca508-2.14.0 probing 041e:4018 [ 549.297356][ T9560] Buffer I/O error on dev loop5, logical block 511, async page read [ 549.401106][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.401594][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.489348][ T9558] gspca_spca508: reg_read err -71 [ 549.497599][ T9558] gspca_spca508: reg_read err -71 [ 549.499154][ T9558] gspca_spca508: reg_read err -71 [ 549.499770][ T9558] gspca_spca508: reg_read err -71 [ 549.500124][ T9558] gspca_spca508: reg write: error -71 [ 549.500187][ T9558] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 549.558928][ T9558] usb 8-1: USB disconnect, device number 10 [ 549.979228][ T9558] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 550.068559][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 550.523449][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 550.523575][T10151] bridge_slave_1: left allmulticast mode [ 550.523607][T10151] bridge_slave_1: left promiscuous mode [ 550.633315][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.897211][ T5713] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 551.055799][ T5713] usb 8-1: Using ep0 maxpacket: 8 [ 551.076679][ T5713] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 551.113652][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.113683][ T5713] usb 8-1: Product: syz [ 551.113701][ T5713] usb 8-1: Manufacturer: syz [ 551.113718][ T5713] usb 8-1: SerialNumber: syz [ 551.161191][ T5713] usb 8-1: config 0 descriptor?? [ 551.555673][ T5713] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.520568][ T5713] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 553.856413][ T1002] usb 8-1: USB disconnect, device number 11 [ 554.016919][T10187] FAULT_INJECTION: forcing a failure. [ 554.016919][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 554.016958][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.6.1054 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 554.016991][T10187] Tainted: [Y]=FORCED_BIND [ 554.016999][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.017013][T10187] Call Trace: [ 554.017022][T10187] [ 554.017033][T10187] dump_stack_lvl+0xe8/0x150 [ 554.017072][T10187] should_fail_ex+0x46b/0x600 [ 554.017110][T10187] should_failslab+0xa8/0x100 [ 554.017140][T10187] __kmalloc_noprof+0xf6/0x790 [ 554.017163][T10187] ? tomoyo_realpath_from_path+0xef/0x640 [ 554.017192][T10187] ? tomoyo_realpath_from_path+0xef/0x640 [ 554.017231][T10187] tomoyo_realpath_from_path+0xef/0x640 [ 554.017271][T10187] ? tomoyo_path_number_perm+0x219/0x5f0 [ 554.017297][T10187] tomoyo_path_number_perm+0x246/0x5f0 [ 554.017327][T10187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.017350][T10187] ? __lock_acquire+0x747/0x2de0 [ 554.017397][T10187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.017442][T10187] ? __fget_files+0x2a/0x420 [ 554.017476][T10187] ? __fget_files+0x2a/0x420 [ 554.017516][T10187] ? __fget_files+0x2a/0x420 [ 554.017549][T10187] security_file_ioctl+0xc3/0x2a0 [ 554.017584][T10187] __se_sys_ioctl+0x47/0x170 [ 554.017609][T10187] do_syscall_64+0x166/0x520 [ 554.017629][T10187] ? trace_irq_disable+0x3b/0x140 [ 554.017659][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.017680][T10187] ? clear_bhb_loop+0x70/0xc0 [ 554.017705][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.017726][T10187] RIP: 0033:0x7f1e4fdcf559 [ 554.017745][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.017763][T10187] RSP: 002b:00007f1e4dffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.017785][T10187] RAX: ffffffffffffffda RBX: 00007f1e50056090 RCX: 00007f1e4fdcf559 [ 554.017801][T10187] RDX: 0000200000000580 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 554.017816][T10187] RBP: 00007f1e4dffd090 R08: 0000000000000000 R09: 0000000000000000 [ 554.017829][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.017842][T10187] R13: 00007f1e50056128 R14: 00007f1e50056090 R15: 00007fffef020a38 [ 554.017874][T10187] [ 554.092954][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 554.267255][T10187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.325377][ T35] usb 1-1: USB disconnect, device number 35 [ 554.340748][ T9558] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.340805][ T9558] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 554.341810][ T9558] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 554.341844][ T9558] usb 2-1: can't read configurations, error -71 [ 554.407124][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 554.407971][ T10] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 554.410215][ T10] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 554.410242][ T10] usb 9-1: config 0 has no interface number 0 [ 554.449347][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.449377][ T10] usb 9-1: Product: syz [ 554.449394][ T10] usb 9-1: Manufacturer: syz [ 554.449410][ T10] usb 9-1: SerialNumber: syz [ 554.482883][ T10] usb 9-1: config 0 descriptor?? [ 554.493720][ T10] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.529188][T10190] FAULT_INJECTION: forcing a failure. [ 554.529188][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 554.529317][T10190] CPU: 0 UID: 0 PID: 10190 Comm: syz.7.1055 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 554.529350][T10190] Tainted: [Y]=FORCED_BIND [ 554.529359][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.529374][T10190] Call Trace: [ 554.529386][T10190] [ 554.529396][T10190] dump_stack_lvl+0xe8/0x150 [ 554.529436][T10190] should_fail_ex+0x46b/0x600 [ 554.529475][T10190] should_failslab+0xa8/0x100 [ 554.529502][T10190] ? __se_sys_mbind+0x82b/0x10e0 [ 554.529527][T10190] kmem_cache_alloc_noprof+0x99/0x680 [ 554.529564][T10190] ? __se_sys_mbind+0x82b/0x10e0 [ 554.529597][T10190] __se_sys_mbind+0x82b/0x10e0 [ 554.529623][T10190] ? nr_hugepages_show+0x84/0x2b0 [ 554.529663][T10190] ? __pfx___se_sys_mbind+0x10/0x10 [ 554.529697][T10190] ? __se_sys_futex+0x3a8/0x450 [ 554.529732][T10190] ? rcu_is_watching+0x16/0xb0 [ 554.529763][T10190] ? __x64_sys_mbind+0x21/0xf0 [ 554.529791][T10190] do_syscall_64+0x166/0x520 [ 554.529813][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.529837][T10190] ? clear_bhb_loop+0x70/0xc0 [ 554.529864][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.529886][T10190] RIP: 0033:0x7fd6a10ff559 [ 554.529906][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.529926][T10190] RSP: 002b:00007fd69f356028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 554.529950][T10190] RAX: ffffffffffffffda RBX: 00007fd6a1385fa0 RCX: 00007fd6a10ff559 [ 554.529967][T10190] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 554.529982][T10190] RBP: 00007fd6a1196b20 R08: 0000000000000006 R09: 0000000000000000 [ 554.529997][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.530019][T10190] R13: 00007fd6a1386038 R14: 00007fd6a1385fa0 R15: 00007fff011fe398 [ 554.530055][T10190] [ 554.824759][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.887254][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 554.895688][ T10] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 555.053502][ T9] usb 8-1: unable to get BOS descriptor set [ 555.053824][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 555.056838][T10197] syz_tun: entered allmulticast mode [ 555.075881][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.075907][ T9] usb 8-1: Product: syz [ 555.075923][ T9] usb 8-1: Manufacturer: Ñ‹ [ 555.096272][ T9] usb 8-1: SerialNumber: syz [ 555.287494][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1058'. [ 555.341566][T10183] tipc: Started in network mode [ 555.341596][T10183] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 555.342915][T10183] tipc: Enabled bearer , priority 0 [ 555.607280][ T35] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 555.766077][ T35] usb 7-1: unable to get BOS descriptor or descriptor too short [ 555.766137][ T35] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 555.799752][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.799784][ T35] usb 7-1: Product: syz [ 555.799801][ T35] usb 7-1: Manufacturer: syz [ 555.799819][ T35] usb 7-1: SerialNumber: syz [ 555.917310][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 555.923275][ T5713] usb 9-1: USB disconnect, device number 14 [ 556.101480][T10197] rxe_eth0 speed is unknown, defaulting to 1000 [ 556.238380][ T35] usb 7-1: failed waiting for Axe-Fx III to boot: -71 [ 556.238426][ T35] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 556.272214][ T5713] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 556.274424][T10196] syz_tun: left allmulticast mode [ 556.357641][ T5713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 556.382898][ T5713] quatech2 9-1:0.51: device disconnected [ 556.418746][ T35] usb 7-1: USB disconnect, device number 19 [ 556.498927][ T1002] tipc: Node number set to 43690 [ 560.298205][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.324108][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 562.840623][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.840696][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.917296][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 624.282690][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.282760][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.197111][ T61] Bluetooth: hci5: command 0x0405 tx timeout [ 685.722859][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.722907][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.757540][ T39] INFO: task jbd2/sda1-8:4927 blocked in I/O wait for more than 143 seconds. [ 708.757592][ T39] Tainted: G Y syzkaller #0 [ 708.757607][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ** replaying previous printk message ** [ 708.757607][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.757657][ T39] task:jbd2/sda1-8 state:D stack:25144 pid:4927 tgid:4927 ppid:2 task_flags:0x240040 flags:0x00080000 [ 708.757750][ T39] Call Trace: [ 708.757805][ T39] [ 708.757871][ T39] __schedule+0x171d/0x56e0 [ 708.758073][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.758155][ T39] ? __pfx___schedule+0x10/0x10 [ 708.758195][ T39] ? schedule+0x90/0x2b0 [ 708.758241][ T39] schedule+0x164/0x2b0 [ 708.758276][ T39] io_schedule+0x80/0xe0 [ 708.758311][ T39] bit_wait_io+0x13/0x110 [ 708.758335][ T39] __wait_on_bit+0xac/0x2f0 [ 708.758358][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.758382][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.758407][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.758436][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.758461][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.758490][ T39] ? __wait_on_buffer+0xe/0x80 [ 708.758546][ T39] jbd2_journal_commit_transaction+0x2f77/0x5cb0 [ 708.758632][ T39] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 708.758669][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 708.760378][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 708.760456][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 708.760479][ T39] ? __timer_delete_sync+0x552/0x620 [ 708.760524][ T39] kjournald2+0x3bc/0x740 [ 708.760609][ T39] ? __pfx_kjournald2+0x10/0x10 [ 708.760645][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 708.760670][ T39] ? __kthread_parkme+0x71/0x1f0 [ 708.760713][ T39] ? __kthread_parkme+0x199/0x1f0 [ 708.760748][ T39] kthread+0x38b/0x470 [ 708.760770][ T39] ? __pfx_kjournald2+0x10/0x10 [ 708.760796][ T39] ? __pfx_kthread+0x10/0x10 [ 708.760819][ T39] ret_from_fork+0x514/0xb70 [ 708.760864][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 708.760887][ T39] ? __switch_to+0xc78/0x1410 [ 708.760921][ T39] ? __pfx_kthread+0x10/0x10 [ 708.760944][ T39] ret_from_fork_asm+0x1a/0x30 [ 708.760999][ T39] [ 708.761078][ T39] INFO: task syz-executor:5585 blocked in I/O wait for more than 143 seconds. [ 708.761098][ T39] Tainted: G Y syzkaller #0 [ 708.761110][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.761121][ T39] task:syz-executor state:D stack:21120 pid:5585 tgid:5585 ppid:5584 task_flags:0x440100 flags:0x00080000 [ 708.761176][ T39] Call Trace: [ 708.761184][ T39] [ 708.761196][ T39] __schedule+0x171d/0x56e0 [ 708.761255][ T39] ? __pfx___schedule+0x10/0x10 [ 708.761292][ T39] ? schedule+0x90/0x2b0 [ 708.761343][ T39] schedule+0x164/0x2b0 [ 708.761377][ T39] io_schedule+0x80/0xe0 [ 708.761412][ T39] bit_wait_io+0x13/0x110 [ 708.761436][ T39] __wait_on_bit+0xac/0x2f0 [ 708.761457][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.761482][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.761506][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.761528][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.761554][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.761590][ T39] do_get_write_access+0x667/0x10d0 [ 708.761648][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 708.761688][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 708.761746][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 708.761783][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 708.761836][ T39] ext4_reserve_inode_write+0x294/0x360 [ 708.761868][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 708.761908][ T39] ext4_dirty_inode+0xd0/0x110 [ 708.761930][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 708.761951][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 708.761982][ T39] file_update_time_flags+0x39f/0x450 [ 708.762072][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 708.762107][ T39] ? reacquire_held_locks+0x117/0x1a0 [ 708.762144][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 708.762177][ T39] do_page_mkwrite+0x14a/0x310 [ 708.762219][ T39] do_wp_page+0x209d/0x3d10 [ 708.762268][ T39] ? preempt_count_add+0x6a/0x140 [ 708.762304][ T39] ? __pfx_do_wp_page+0x10/0x10 [ 708.762333][ T39] ? rt_spin_lock+0x2d0/0x400 [ 708.762364][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 708.762399][ T39] ? pte_offset_map_rw_nolock+0xea/0x160 [ 708.762434][ T39] handle_mm_fault+0xd69/0x28c0 [ 708.762473][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 708.762516][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.762547][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 708.762570][ T39] ? __pfx_set_user_sigmask+0x10/0x10 [ 708.762628][ T39] do_user_addr_fault+0xb35/0x1480 [ 708.762672][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 708.762701][ T39] exc_page_fault+0x6a/0xc0 [ 708.762739][ T39] asm_exc_page_fault+0x26/0x30 [ 708.762777][ T39] RIP: 0033:0x7f048970dad6 [ 708.762796][ T39] RSP: 002b:00007fff3fbb2790 EFLAGS: 00010202 [ 708.762844][ T39] RAX: 00007f048769c000 RBX: 0000555577e5f7e0 RCX: 0000000000000006 [ 708.762860][ T39] RDX: 00000000000029d2 RSI: 0000555577e5e288 RDI: 0000000000000040 [ 708.762874][ T39] RBP: 00007fff3fbb2c90 R08: 0000555577e5e288 R09: 00000000000000a0 [ 708.762889][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff3fbb2ad0 [ 708.762903][ T39] R13: 00007fff3fbb28c0 R14: 585858582e7a7973 R15: 00007fff3fbb2810 [ 708.762937][ T39] [ 708.762997][ T39] INFO: task syz.7.1055:10189 blocked in I/O wait for more than 143 seconds. [ 708.763015][ T39] Tainted: G Y syzkaller #0 [ 708.763027][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.763036][ T39] task:syz.7.1055 state:D stack:24840 pid:10189 tgid:10189 ppid:8728 task_flags:0x440040 flags:0x00080002 [ 708.763094][ T39] Call Trace: [ 708.763102][ T39] [ 708.763115][ T39] __schedule+0x171d/0x56e0 [ 708.763172][ T39] ? __pfx___schedule+0x10/0x10 [ 708.763211][ T39] ? schedule+0x90/0x2b0 [ 708.763245][ T39] schedule+0x164/0x2b0 [ 708.763277][ T39] io_schedule+0x80/0xe0 [ 708.763309][ T39] bit_wait_io+0x13/0x110 [ 708.763332][ T39] __wait_on_bit+0xac/0x2f0 [ 708.763352][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.763376][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.763399][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.763419][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.763444][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.763498][ T39] do_get_write_access+0x667/0x10d0 [ 708.763549][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 708.763584][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 708.763630][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 708.763664][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 708.763704][ T39] ext4_reserve_inode_write+0x294/0x360 [ 708.763733][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 708.763771][ T39] ext4_dirty_inode+0xd0/0x110 [ 708.763791][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 708.763811][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 708.763840][ T39] file_update_time_flags+0x39f/0x450 [ 708.763876][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 708.763907][ T39] ? __pfx_filemap_fault+0x10/0x10 [ 708.763958][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 708.763983][ T39] ? lock_acquire+0x115/0x350 [ 708.764015][ T39] do_page_mkwrite+0x14a/0x310 [ 708.764043][ T39] do_pte_missing+0x734/0x28f0 [ 708.764074][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 708.764110][ T39] handle_mm_fault+0xf64/0x28c0 [ 708.764147][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 708.764187][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.764217][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 708.764251][ T39] ? sched_clock_cpu+0x74/0x440 [ 708.764288][ T39] do_user_addr_fault+0xb35/0x1480 [ 708.764322][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 708.764348][ T39] exc_page_fault+0x6a/0xc0 [ 708.764370][ T39] asm_exc_page_fault+0x26/0x30 [ 708.764390][ T39] RIP: 0033:0x7fd6a0fd4332 [ 708.764408][ T39] RSP: 002b:00007fff011fe3f0 EFLAGS: 00010202 [ 708.764426][ T39] RAX: 000000000000c008 RBX: 00007fd6a1eb5720 RCX: 0000000000000000 [ 708.764440][ T39] RDX: 0000001b2e518000 RSI: 0000000000000008 RDI: 00007fd6a1eb5720 [ 708.764455][ T39] RBP: 00000000000006da R08: 00007fd6a1370000 R09: 00007fd6a1386038 [ 708.764469][ T39] R10: 0000000000000003 R11: 000000000000000a R12: ffffffff873fb3bf [ 708.764483][ T39] R13: 00007fd6a1386038 R14: 00000000000001be R15: ffffffffffff4000 [ 708.764501][ T39] ? gadget_bind_driver+0x43f/0x9e0 [ 708.764605][ T39] [ 708.764614][ T39] INFO: task syz.6.1058:10196 blocked in I/O wait for more than 143 seconds. [ 708.764638][ T39] Tainted: G Y syzkaller #0 [ 708.764650][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.764660][ T39] task:syz.6.1058 state:D stack:24536 pid:10196 tgid:10196 ppid:8212 task_flags:0x440040 flags:0x00080002 [ 708.764717][ T39] Call Trace: [ 708.764724][ T39] [ 708.764736][ T39] __schedule+0x171d/0x56e0 [ 708.764791][ T39] ? __pfx___schedule+0x10/0x10 [ 708.764849][ T39] ? schedule+0x90/0x2b0 [ 708.764883][ T39] schedule+0x164/0x2b0 [ 708.764917][ T39] io_schedule+0x80/0xe0 [ 708.764952][ T39] bit_wait_io+0x13/0x110 [ 708.764976][ T39] __wait_on_bit+0xac/0x2f0 [ 708.764998][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.765023][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.765047][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.765070][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.765096][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.765136][ T39] do_get_write_access+0x667/0x10d0 [ 708.765208][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 708.765268][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 708.765314][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 708.765352][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 708.765397][ T39] ext4_reserve_inode_write+0x294/0x360 [ 708.765432][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 708.765475][ T39] ext4_dirty_inode+0xd0/0x110 [ 708.765499][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 708.765521][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 708.765555][ T39] file_update_time_flags+0x39f/0x450 [ 708.765598][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 708.765642][ T39] ? reacquire_held_locks+0x117/0x1a0 [ 708.765682][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 708.765718][ T39] do_page_mkwrite+0x14a/0x310 [ 708.765751][ T39] do_wp_page+0x209d/0x3d10 [ 708.765805][ T39] ? preempt_count_add+0x6a/0x140 [ 708.765838][ T39] ? __pfx_do_wp_page+0x10/0x10 [ 708.765871][ T39] ? rt_spin_lock+0x2d0/0x400 [ 708.765905][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 708.765942][ T39] ? pte_offset_map_rw_nolock+0xea/0x160 [ 708.765981][ T39] handle_mm_fault+0xd69/0x28c0 [ 708.766024][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 708.766071][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.766105][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 708.766158][ T39] do_user_addr_fault+0xb35/0x1480 [ 708.766200][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 708.766232][ T39] exc_page_fault+0x6a/0xc0 [ 708.766257][ T39] asm_exc_page_fault+0x26/0x30 [ 708.766280][ T39] RIP: 0033:0x7f1e4fca3c09 [ 708.766300][ T39] RSP: 002b:00007fffef020ac0 EFLAGS: 00010206 [ 708.766322][ T39] RAX: 0000001b2da23e50 RBX: fffffffffffffe50 RCX: ffffffff86ea3f63 [ 708.766341][ T39] RDX: 0000001b2da23e4c RSI: 0000000000000004 RDI: 00007f1e50b85720 [ 708.766369][ T39] RBP: 0000000000000000 R08: 00007f1e50040000 R09: 00007f1e50042000 [ 708.766386][ T39] R10: 0000000086ea3f67 R11: 00000000000000ff R12: 0000000000000000 [ 708.766401][ T39] R13: 000000000000003d R14: ffffffff86ea3af3 R15: 00007f1e50b85720 [ 708.766418][ T39] ? __usb_hcd_giveback_urb+0x423/0x5f0 [ 708.766539][ T39] ? usb_hcd_flush_endpoint+0x293/0x430 [ 708.766582][ T39] [ 708.766592][ T39] INFO: task syz.8.1059:10206 blocked in I/O wait for more than 143 seconds. [ 708.766612][ T39] Tainted: G Y syzkaller #0 [ 708.766630][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.766641][ T39] task:syz.8.1059 state:D stack:26608 pid:10206 tgid:10206 ppid:8951 task_flags:0x440040 flags:0x00080002 [ 708.766705][ T39] Call Trace: [ 708.766714][ T39] [ 708.766727][ T39] __schedule+0x171d/0x56e0 [ 708.766786][ T39] ? __pfx___schedule+0x10/0x10 [ 708.766826][ T39] ? schedule+0x90/0x2b0 [ 708.766861][ T39] schedule+0x164/0x2b0 [ 708.766895][ T39] io_schedule+0x80/0xe0 [ 708.767136][ T39] bit_wait_io+0x13/0x110 [ 708.767215][ T39] __wait_on_bit+0xac/0x2f0 [ 708.767269][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.767330][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.767410][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.767466][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.767544][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.767658][ T39] do_get_write_access+0x667/0x10d0 [ 708.767799][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 708.767918][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 708.768028][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 708.768122][ T39] ? jbd2__journal_start+0x145/0x5d0 [ 708.768218][ T39] ext4_reserve_inode_write+0x294/0x360 [ 708.768297][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 708.768398][ T39] ext4_dirty_inode+0xd0/0x110 [ 708.768481][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 708.768513][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 708.768554][ T39] ? mnt_get_write_access+0x26a/0x2d0 [ 708.768576][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 708.768607][ T39] touch_atime+0x568/0x670 [ 708.768643][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 708.768678][ T39] ext4_file_mmap_prepare+0x286/0x460 [ 708.768713][ T39] mmap_region+0xebb/0x25c0 [ 708.768767][ T39] ? __pfx_mmap_region+0x10/0x10 [ 708.768803][ T39] ? try_to_take_rt_mutex+0x842/0xb00 [ 708.768865][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.768903][ T39] ? __lock_acquire+0x747/0x2de0 [ 708.769064][ T39] ? mt_find+0x186/0x630 [ 708.769141][ T39] ? mt_find+0x5ff/0x630 [ 708.769168][ T39] ? mt_find+0x186/0x630 [ 708.769214][ T39] ? __pfx_mt_find+0x10/0x10 [ 708.769324][ T39] ? bpf_lsm_mmap_addr+0x9/0x50 [ 708.769408][ T39] ? security_mmap_addr+0x71/0x240 [ 708.769531][ T39] ? shmem_mapping+0xd/0x50 [ 708.769617][ T39] ? memfd_check_seals_mmap+0xcb/0x230 [ 708.769721][ T39] do_mmap+0xe0e/0x1310 [ 708.769827][ T39] ? __pfx_do_mmap+0x10/0x10 [ 708.769931][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 708.769986][ T39] ? rwbase_write_lock+0x5ad/0x780 [ 708.770091][ T39] vm_mmap_pgoff+0x275/0x4e0 [ 708.770196][ T39] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 708.770291][ T39] ? __fget_files+0x2a/0x420 [ 708.770374][ T39] ? __fget_files+0x3a8/0x420 [ 708.770454][ T39] ? __fget_files+0x2a/0x420 [ 708.770557][ T39] ksys_mmap_pgoff+0x4a6/0x720 [ 708.770632][ T39] ? __x64_sys_mmap+0x7f/0x140 [ 708.770715][ T39] do_syscall_64+0x166/0x520 [ 708.770814][ T39] ? trace_irq_disable+0x3b/0x140 [ 708.770919][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.770994][ T39] ? clear_bhb_loop+0x70/0xc0 [ 708.771079][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.771130][ T39] RIP: 0033:0x7ff6359cf2c2 [ 708.771181][ T39] RSP: 002b:00007ffecea14318 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 708.771240][ T39] RAX: ffffffffffffffda RBX: 0000001b34064000 RCX: 00007ff6359cf2c2 [ 708.771281][ T39] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34064000 [ 708.771321][ T39] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 708.771356][ T39] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000032 [ 708.771390][ T39] R13: 00000000000927c0 R14: 0000000000087880 R15: 00007ffecea145f0 [ 708.771499][ T39] [ 708.771529][ T39] INFO: task syz.0.1060:10207 blocked in I/O wait for more than 143 seconds. [ 708.771587][ T39] Tainted: G Y syzkaller #0 [ 708.771620][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.771668][ T39] task:syz.0.1060 state:D stack:27832 pid:10207 tgid:10207 ppid:5606 task_flags:0x440040 flags:0x00080002 [ 708.771843][ T39] Call Trace: [ 708.771864][ T39] [ 708.771905][ T39] __schedule+0x171d/0x56e0 [ 708.772096][ T39] ? __pfx___schedule+0x10/0x10 [ 708.772201][ T39] ? schedule+0x90/0x2b0 [ 708.772322][ T39] schedule+0x164/0x2b0 [ 708.772424][ T39] io_schedule+0x80/0xe0 [ 708.772531][ T39] bit_wait_io+0x13/0x110 [ 708.772600][ T39] __wait_on_bit+0xac/0x2f0 [ 708.772673][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.772749][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 708.772818][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 708.772883][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 708.772962][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 708.773071][ T39] do_get_write_access+0x667/0x10d0 [ 708.773229][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 708.773349][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 708.773485][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 708.773566][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 708.773692][ T39] ext4_reserve_inode_write+0x294/0x360 [ 708.773787][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 708.773904][ T39] ext4_dirty_inode+0xd0/0x110 [ 708.773967][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 708.774024][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 708.774116][ T39] file_update_time_flags+0x39f/0x450 [ 708.774228][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 708.774327][ T39] ? __pfx_filemap_fault+0x10/0x10 [ 708.774423][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 708.774490][ T39] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 708.774655][ T39] do_page_mkwrite+0x14a/0x310 [ 708.774725][ T39] do_pte_missing+0x734/0x28f0 [ 708.774800][ T39] ? rt_spin_unlock+0x165/0x200 [ 708.774885][ T39] ? __pmd_alloc+0x41b/0x5e0 [ 708.774987][ T39] handle_mm_fault+0xf64/0x28c0 [ 708.775051][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 708.775155][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.775235][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 708.775363][ T39] do_user_addr_fault+0xb35/0x1480 [ 708.775459][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 708.775543][ T39] exc_page_fault+0x6a/0xc0 [ 708.775617][ T39] asm_exc_page_fault+0x26/0x30 [ 708.775687][ T39] RIP: 0033:0x7f21b289cea3 [ 708.775725][ T39] RSP: 002b:00007ffe6cb124f0 EFLAGS: 00010246 [ 708.775777][ T39] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 708.775819][ T39] RDX: 0000001b32a24000 RSI: 0000000000040000 RDI: 00007f21b2c17708 [ 708.775866][ T39] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.775900][ T39] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 708.775934][ T39] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe6cb12780 [ 708.776026][ T39] [ 708.776067][ T39] [ 708.776067][ T39] Showing all locks held in the system: [ 708.776109][ T39] locks held by pr/ttyS0/38: 3, last CPU#0: [ 708.776224][ T39] #0: ffffffff8f29aa98 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 708.776450][ T39] #1: ffffffff9b120b38 (&port_lock_key){+.+.}-{3:3}, at: rt_spin_lock+0x1e2/0x400 [ 708.776563][ T39] #2: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 708.776764][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 708.776805][ T39] #0: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 708.778788][ T39] locks held by kworker/u8:12/1505: 8, last CPU#1: [ 708.778834][ T39] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.778988][ T39] #1: ffffc900071d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.779150][ T39] #2: ffff8880353b8310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 708.779408][ T39] #3: ffff888061d42120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 708.779510][ T39] #4: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 708.779665][ T39] #5: ffffffff8f2555a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.779820][ T39] #6: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.779966][ T39] #7: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 708.781879][ T39] locks held by klogd/4953: 3, on CPU#0: [ 708.781921][ T39] #0: ffffffff8f2555a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.782068][ T39] #1: ffffffff8f3c1000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 708.782216][ T39] #2: ffff8880b8439a38 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450 [ 708.782443][ T39] locks held by getty/5354: 2, on CPU#0: [ 708.782477][ T39] #0: ffff8880377e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 708.787658][ T39] #1: ffffc900044f32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 708.787834][ T39] locks held by syz-executor/5585: 3, on CPU#1: [ 708.787874][ T39] #0: ffff888035d72a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 708.788017][ T39] #1: ffff888037d36688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 708.789707][ T39] #2: ffff888037d32bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 708.789820][ T39] locks held by kworker/u8:19/6334: 3, last CPU#0: [ 708.789837][ T39] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.789896][ T39] #1: ffffc90006f67c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.789954][ T39] #2: ffff888062540938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 708.790061][ T39] locks held by kworker/u8:21/8593: 3, last CPU#1: [ 708.790077][ T39] #0: ffff88813fe34140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.790137][ T39] #1: ffffc900041cfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 708.790197][ T39] #2: ffff888064380938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 708.790252][ T39] locks held by syz.7.1055/10189: 3, on CPU#1: [ 708.790268][ T39] #0: ffff888040083088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 708.790320][ T39] #1: ffff888037d36688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 708.790370][ T39] #2: ffff888037d32bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 708.790431][ T39] locks held by syz.6.1058/10196: 3, on CPU#0: [ 708.790447][ T39] #0: ffff888032ed7088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 708.790499][ T39] #1: ffff888037d36688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 708.790560][ T39] #2: ffff888037d32bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 708.790618][ T39] locks held by syz.8.1059/10206: 3, on CPU#0: [ 708.790638][ T39] #0: ffff8880391737b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 708.790693][ T39] #1: ffff888037d36510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 708.790751][ T39] #2: ffff888037d32bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 708.790808][ T39] locks held by syz.0.1060/10207: 3, on CPU#0: [ 708.790823][ T39] #0: ffff888026c24308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 708.790869][ T39] #1: ffff888037d36688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 708.790916][ T39] #2: ffff888037d32bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 708.790974][ T39] [ 708.790980][ T39] ============================================= [ 708.790980][ T39] [ 708.790997][ T39] NMI backtrace for cpu 1 [ 708.791016][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 708.791068][ T39] Tainted: [Y]=FORCED_BIND [ 708.791083][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 708.791105][ T39] Call Trace: [ 708.791115][ T39] [ 708.791123][ T39] dump_stack_lvl+0xe8/0x150 [ 708.791167][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 708.791282][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 708.791346][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 708.791437][ T39] sys_info+0x135/0x170 [ 708.791502][ T39] watchdog+0xfd2/0x1030 [ 708.791598][ T39] ? watchdog+0x1c7/0x1030 [ 708.791699][ T39] kthread+0x38b/0x470 [ 708.791756][ T39] ? __pfx_watchdog+0x10/0x10 [ 708.791829][ T39] ? __pfx_kthread+0x10/0x10 [ 708.791891][ T39] ret_from_fork+0x514/0xb70 [ 708.791954][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 708.792009][ T39] ? __switch_to+0xc78/0x1410 [ 708.792091][ T39] ? __pfx_kthread+0x10/0x10 [ 708.792142][ T39] ret_from_fork_asm+0x1a/0x30 [ 708.792235][ T39] [ 708.792324][ T39] Sending NMI from CPU 1 to CPUs 0: [ 708.792392][ C0] NMI backtrace for cpu 0 [ 708.792408][ C0] CPU: 0 UID: 0 PID: 38 Comm: pr/ttyS0 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 708.792432][ C0] Tainted: [Y]=FORCED_BIND [ 708.792438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 708.792449][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 708.792513][ C0] Code: e8 9e 71 60 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 4d cd fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 708.792527][ C0] RSP: 0018:ffffc90000af78b8 EFLAGS: 00000202 [ 708.792553][ C0] RAX: 1ffffffff3624100 RBX: 00000000000003fd RCX: 0000000000000000 [ 708.792564][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 708.792574][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.792585][ C0] R10: dffffc0000000000 R11: ffffffff8566be60 R12: dffffc0000000000 [ 708.792616][ C0] R13: 0000000000000000 R14: ffffffff9b120b60 R15: 0000000000000000 [ 708.792628][ C0] FS: 0000000000000000(0000) GS:ffff88812474e000(0000) knlGS:0000000000000000 [ 708.792642][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.792657][ C0] CR2: 00005584ad7a4830 CR3: 00000000390c2000 CR4: 00000000003526f0 [ 708.792672][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 708.792684][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 708.792696][ C0] Call Trace: [ 708.792710][ C0] [ 708.792718][ C0] wait_for_lsr+0x190/0x300 [ 708.792770][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 708.792797][ C0] serial8250_console_write+0xaa2/0x1220 [ 708.792829][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 708.792866][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 708.792900][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 708.792928][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 708.792964][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 708.792992][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 708.793015][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 708.793043][ C0] ? __kthread_parkme+0x71/0x1f0 [ 708.793069][ C0] ? __kthread_parkme+0x199/0x1f0 [ 708.793097][ C0] kthread+0x38b/0x470 [ 708.793113][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 708.793141][ C0] ? __pfx_kthread+0x10/0x10 [ 708.793159][ C0] ret_from_fork+0x514/0xb70 [ 708.793179][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 708.793197][ C0] ? __switch_to+0xc78/0x1410 [ 708.793224][ C0] ? __pfx_kthread+0x10/0x10 [ 708.793241][ C0] ret_from_fork_asm+0x1a/0x30 [ 708.793267][ C0] [ 708.793647][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 711.441223][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 711.452528][ T39] Tainted: [Y]=FORCED_BIND [ 711.456979][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 711.467056][ T39] Call Trace: [ 711.470356][ T39] [ 711.473297][ T39] vpanic+0x56d/0xa60 [ 711.477331][ T39] ? __pfx___schedule+0x10/0x10 [ 711.482198][ T39] ? __pfx_vpanic+0x10/0x10 [ 711.486717][ T39] panic+0xc5/0xd0 [ 711.490441][ T39] ? __pfx_panic+0x10/0x10 [ 711.494856][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 711.500335][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 711.505718][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 711.511898][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 711.518072][ T39] watchdog+0x102b/0x1030 [ 711.522452][ T39] ? watchdog+0x1c7/0x1030 [ 711.526923][ T39] kthread+0x38b/0x470 [ 711.531036][ T39] ? __pfx_watchdog+0x10/0x10 [ 711.535749][ T39] ? __pfx_kthread+0x10/0x10 [ 711.540371][ T39] ret_from_fork+0x514/0xb70 [ 711.544999][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 711.550146][ T39] ? __switch_to+0xc78/0x1410 [ 711.554887][ T39] ? __pfx_kthread+0x10/0x10 [ 711.559517][ T39] ret_from_fork_asm+0x1a/0x30 [ 711.564359][ T39] [ 711.567664][ T39] Kernel Offset: disabled [ 711.572034][ T39] Rebooting in 86400 seconds..